02e3be652c222c0bb72320d2a6fa1877 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e3be652c222c0bb72320d2a6fa1877
Size

22KB
MD5

02e3be652c222c0bb72320d2a6fa1877
SHA1

ae6c53c00c01b4c3fc8bc4803bc54d2a4b92e4c4
SHA256

6dfbf7ba38724b5970279192b628960f6ccbecc1bb5d4d102c144202729c8d0a
SHA512

4e263961c2d84e581d2cd9a9cf844805f0cb63e26ecf5e924826ca8a39099268d657bb05d9616c30736c4b6169678246e8e83145455e2bbd5758e5d0fd1a6d39
SSDEEP

384:zPyZNjtU2mJVAbAp6T/6UbSC8aY2oxq+i1KljZhjRgnz1cMhbZctewuf:7yZidpOiK8ajoQGBZhNg1cAmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e3be652c222c0bb72320d2a6fa1877

Files

02e3be652c222c0bb72320d2a6fa1877
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFireWall
UnHookWindow

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ