2dd87b906177837fb54b0e900c35f250 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd87b906177837fb54b0e900c35f250
Size

23KB
MD5

2dd87b906177837fb54b0e900c35f250
SHA1

b6b80a9b72f9560125b0ab43eb1cacf9f926a215
SHA256

c6134aed3898e9254470cf403a6b3af9af2fe3951f83c9453db0f3e7506f7173
SHA512

1d267d974a55dae95fb9c936eab030867206f600e5b8514e110a27ac7b9dfb512a88024a0c4d81db6b72efb5393ab37a665922b35bc709878a4504887d82d09a
SSDEEP

384:EidD9d6GAfwjeILb9U2NSr2iJz5KHNGy50GWQKaK94ySyF58Zj1/tNoFANozuUHy:RG6ekxnNPijpy50GuBo1NjoONouUn+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd87b906177837fb54b0e900c35f250

Files

2dd87b906177837fb54b0e900c35f250
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fslj423j3423

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ