cdb7dcb3d2921de6973cf05d070258c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdb7dcb3d2921de6973cf05d070258c0
Size

158KB
MD5

cdb7dcb3d2921de6973cf05d070258c0
SHA1

edda1d20c5a1eb164d33fdadfdeabfa61c625569
SHA256

071d8b9828353a566d8dfae98f352ef9b8c625478201cc7cfa77229928d822c7
SHA512

d5944577b21db91e5d4823d9ca023805da45be9776978f7c0f309a7c8456999768ecfdc5bf78d4b3fdc9ecfa04599ef0d99d1d2f49019af27541584dd5467562
SSDEEP

1536:oLk8ES+Sr/6O9j8ozm947lpYGzCzsz4rbaZo5lXoUn/Bn8xg5iWqULULI7/VSYG:oGFSLxuOD732zszUbt//B8xd9OKS/V+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdb7dcb3d2921de6973cf05d070258c0

Files

cdb7dcb3d2921de6973cf05d070258c0
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

dxtggl
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

m
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hp
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE