1f63d9c4508c6fd08104d563bb740206b3856f42ed6d8bdff26271e0f1410e04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f63d9c4508c6fd08104d563bb740206b3856f42ed6d8bdff26271e0f1410e04
Size

23KB
MD5

335fbd32d77e794878a90ba03c3fa9e0
SHA1

8ca3ba348a869cf7e4d7c4856d890aaf7c707ba1
SHA256

1f63d9c4508c6fd08104d563bb740206b3856f42ed6d8bdff26271e0f1410e04
SHA512

e9e59107519f9df5a9743eb061bfb6ca733bc2bef7c1cc21aff1fcb92c102793673898f332b9ca54ebb67c96a90859cd25a97d8788113f94fed5553cb0f4b3ca
SSDEEP

384:j4qY96DOHTrY65w4YQZppQLwhz4Bz7979nXAEKOFaKjBXHf/:gI659YQZpCwhzO7pNhFaKjJHf

Score

N/A

Malware Config

Signatures

Files

1f63d9c4508c6fd08104d563bb740206b3856f42ed6d8bdff26271e0f1410e04
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Hookoff
Hookon

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ