73388951a67755de291dbe00765de3ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73388951a67755de291dbe00765de3ae
Size

18KB
MD5

73388951a67755de291dbe00765de3ae
SHA1

95015691c8af18a42407f19d9840a9e97c0b7736
SHA256

7bfa0a29ecde16881f8c4962a155bff92d7f5712f2e7552bfc2279044aeaf081
SHA512

aca377e16a2c6fead636bbf1876c8d3fa00e67954ea2bfc9214c37efdad9aeda67df5bb4d3dcc7fdc0dd73c97f1fabb71dbe2e57e5cdb516b2002dd5e9e0c2a4
SSDEEP

384:fo+FSriqxOEvOz9UfEvNAsFTeQgs6VXuaq9bWN:BF9qQEvORUfOAg3BErq96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73388951a67755de291dbe00765de3ae

Files

73388951a67755de291dbe00765de3ae
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

RemoveAppHook
RemoveDestroyHook
RemoveKeyboardHook
RemoveMouseHook
RemoveShiftCapsHook
RemoveWindowHook
SetAppHook
SetDestroyHook
SetKeyboardHook5
SetMouseHook
SetShiftCapsHook
SetWindowHook

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ