EnableAll[.]exe | Triage

Sharing

General

Target

EnableAll.exe
Size

4KB
MD5

547b59239b66ad1f6bce037cae0f687c
SHA1

d24f9e00162c5d59b1f950d5b2faa672363d7d55
SHA256

b5bb941069e0098e90072438d18c997528773dceae0160777f39c5bd767a3efa
SHA512

3c3d9fede1818091a51a5d966505f6595100f90e69b86b98aa46711eaf347fc2fdcfee1684feadf0367074006923868342080af960f63536e638f7c5fb6deb56

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EnableAll.exe

Files

EnableAll.exe
.exe windows:4 windows x86

b763215ab2093e388a50ec2a32bac4ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
GetParent
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
GetCursorPos
PtInRect
RegisterClassExA
SendMessageA
SetForegroundWindow
TrackPopupMenu
TranslateMessage
EnumChildWindows
EnableWindow
EnableMenuItem
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
CheckMenuItem
CreatePopupMenu
AppendMenuA
PostQuitMessage

kernel32

lstrcpyA
GetModuleHandleA
GetLastError
ExitProcess
CreateSemaphoreA
CloseHandle

shell32

Shell_NotifyIconA

enableallproc

InstallHook
UninstallHook

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE