0bf9ba1a084259b334bf003830a20e96 | Triage

Sharing

General

Target

0bf9ba1a084259b334bf003830a20e96
Size

2KB
MD5

0bf9ba1a084259b334bf003830a20e96
SHA1

d17f06a3949b0753c810699d3615290b1c47b872
SHA256

842637f4e6a69b8b41bb5e7a09d38d03057c016682c42c1f28d7cb03fb6f0dfd
SHA512

508cf924d707b985e1a126114fcbb5303a3963178d18fe2fa4a3fad38fc025e2cf7821b180ef2d3b85927aac666672cf388bfa62c56c95bcaf2c7bed5d982801

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf9ba1a084259b334bf003830a20e96

Files

0bf9ba1a084259b334bf003830a20e96
.dll windows:4 windows x86 arch:x86

b561a860dc7a3e959129c49c72ff1d45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

UnhookWindowsHookEx
ToAscii
SetWindowsHookExA
GetWindowTextA
GetKeyboardState
GetForegroundWindow
CallNextHookEx
wsprintfA

kernel32

CreateFileA
lstrlenA
lstrcatA
WriteFile
SetFilePointer
GetWindowsDirectoryA
GetFileSize
CloseHandle
CreateDirectoryA

Exports

Exports

a
b

Sections

.text
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 603B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ