145c8773883f6417a6107e6f49a1b8bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

145c8773883f6417a6107e6f49a1b8bb
Size

469KB
MD5

145c8773883f6417a6107e6f49a1b8bb
SHA1

8c7c7fb91900e49dea9759aeea14dc90550cdc0d
SHA256

e71f083d907482dfa7f5b06ea64a67bc98f9135d31a4136d7469eb1227164afa
SHA512

fafc39d1d139ce252618662063563f38c096ad95b7928d1445fca479a6ee21708e9860c6a9cfe5aeabf7a3d361a2a73e0a4d7b491c43bd7db0e94449e6ff934b
SSDEEP

12288:hhifG2nzLd+itsny7X2OKY4DQFu/U3buRKlemZ9DnKctl+jyH/LO:PCVzQM3Dll+jyHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
145c8773883f6417a6107e6f49a1b8bb

Files

145c8773883f6417a6107e6f49a1b8bb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookProc

Sections

CODE
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ