cd80b12d4877cb26a25d2af6dcf14c0c | Triage

Sharing

General

Target

cd80b12d4877cb26a25d2af6dcf14c0c
Size

45KB
MD5

cd80b12d4877cb26a25d2af6dcf14c0c
SHA1

c9f89e10a4749c006ccb9d4832091a18e4a59794
SHA256

c4e16301a51dd44607db6a846b5e1d9ca3ae92d4fc9219afa3d1a50149b01653
SHA512

6dd0a169e9042f581038a55ba96fc86dac69afc4f7b6aed0b76d9db25a548ff798b497815f08ea24cd914893b5d20d6bee1f2ef40fa255303ce1df2097b6be7e
SSDEEP

768:h881R5oxNRHZs+LehC6v7iHCjMA2XVrb7imnJnU4fU5x4qBCH:hzC5s+LehCuiHCj/2l5FfUflCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd80b12d4877cb26a25d2af6dcf14c0c

Files

cd80b12d4877cb26a25d2af6dcf14c0c
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ