48e99be9931aa27247d4e280a3bdb48c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e99be9931aa27247d4e280a3bdb48c
Size

24KB
MD5

48e99be9931aa27247d4e280a3bdb48c
SHA1

92cc075dd78336e739503a0319c93529e3d03b73
SHA256

9a8c2dd95f4886f586cce91c1c23ad9e76ad2ca3f4461a31e1e4346bafb6016a
SHA512

cb56c2a22785efb0327faa5846d5c44ac365b05b2318dd3db9f52d3631a157e1c6526dedfcb73217d0a7411c7f0bb4fbf158b2a3d9c479d0c4483f8aebcbaebd
SSDEEP

384:W6idD9d6GAvmAxb2KDNCy+cSq1sT5PcmrTPbrHXjqAZEiURyzXesy5bT:8XiugSCsGmrbbrTqAdURyXes03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e99be9931aa27247d4e280a3bdb48c

Files

48e99be9931aa27247d4e280a3bdb48c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjlsj4ejfjsv

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ