1273e25d16a4c693ffe8bc6621358da6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1273e25d16a4c693ffe8bc6621358da6
Size

20KB
MD5

1273e25d16a4c693ffe8bc6621358da6
SHA1

2b56b707cba68239d2ab5ce9a4bf7171304ed0ad
SHA256

77ec899ad5b1a5a10dca10341c9e0a4a341b3e05a32db1a9aab821183c163293
SHA512

5b18bab36b815123d49830fb11c15df7d8ada002a6bb52c364c3eb5ddc2150e8954410a9f42b6825779ae6d2c2dd4283372d48e2ba317eeafae597dfa28c559c
SSDEEP

384:rPyZNjtU2m/gxDwGpmEs1C1PNskqEjHbzEiqrRSEcy:zyZmKl5kC1V7XEiqrRSO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1273e25d16a4c693ffe8bc6621358da6

Files

1273e25d16a4c693ffe8bc6621358da6
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
a4e5b47ec457

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ