535856ea71bf2bc35fd6cf34391215b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

535856ea71bf2bc35fd6cf34391215b2
Size

1.8MB
MD5

535856ea71bf2bc35fd6cf34391215b2
SHA1

72659bb1d13e5333848eada0c6e8df35ac700e13
SHA256

f00ba0aa47eac695523f1fc7bd34a8f08b1384a50e30724f4c17aace47697169
SHA512

b9a1bbcf75a14b69df9a492632b713354d5023ef0dec10a17bce6aa13a347ae0c663bdf13b725f4effecf87fc7e45e33ca1f3ff6196ef54ebb5712df68f3fbf7
SSDEEP

24576:L/D/tpMEM5HTxSiie9z+APqFwosOpXTLjKKt5FtWOGghJWGSmWXN+fmvO9oIYLIs:L/DD+zxSix+A21njT3WzSXNGU2ITKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
535856ea71bf2bc35fd6cf34391215b2

Files

535856ea71bf2bc35fd6cf34391215b2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

.textbss
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 438B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 86B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ