17dd01b52231bb3db2c7de877ed31e5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17dd01b52231bb3db2c7de877ed31e5f
Size

3KB
MD5

17dd01b52231bb3db2c7de877ed31e5f
SHA1

683e5f635e1f612f77c4ea391d95ca6e1b053cbe
SHA256

caa7930448a601e33156b429ba51162dcf9d3e28190af7c4b2b07f077746602c
SHA512

b16a6a0d9564f41b18c97a9492076a477ca5b4987ddafe59fe444845c5a8b26748b0d3d775e25373e2fc41764aed579e6c0491b29859109ad6d9c9f3b94440ee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17dd01b52231bb3db2c7de877ed31e5f

Files

17dd01b52231bb3db2c7de877ed31e5f
.dll windows:4 windows x86 arch:x86

a41b113618c326721ef91b85fbb84b1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError

user32

CallNextHookEx
GetKeyboardState
PostMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx

Exports

Exports

InstallHook
KeyboardProc
UninstallHook

Sections

.text
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 268B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ