266cb521782e80f879b51bf0e7cffc6dd82be07b5aec42c8d5de635b2d13a06b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

266cb521782e80f879b51bf0e7cffc6dd82be07b5aec42c8d5de635b2d13a06b
Size

88KB
MD5

ea2a83bfe4ee9fec0fdcea5c79b350c4
SHA1

a446a5aa4d75c1af8b897ceabffdecd5a2a25239
SHA256

266cb521782e80f879b51bf0e7cffc6dd82be07b5aec42c8d5de635b2d13a06b
SHA512

36bceffa96754a6c1af5c3dc19de651415426487ad1f801c0cfb21cd5a1356ac2ed5f8ced0401d58164e8dc373c211f59e062bc8541d6323980efb54e09afc19
SSDEEP

1536:AwJ5B4RIC+PIr1oL9nIbTXbgVkQwBFS6W7aIkPoCYEswWJzSbso9:d5CLyIr1oL9YLbgOQwBFS6W7aIkgCm5M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
266cb521782e80f879b51bf0e7cffc6dd82be07b5aec42c8d5de635b2d13a06b

Files

266cb521782e80f879b51bf0e7cffc6dd82be07b5aec42c8d5de635b2d13a06b
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

SetHook
StopHook

Sections

CODE
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ