04aaed9d026e9bcd5be054e38456fa6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04aaed9d026e9bcd5be054e38456fa6b
Size

28KB
MD5

04aaed9d026e9bcd5be054e38456fa6b
SHA1

ca253f4089f3c709f31d85f91d216aed93efc49d
SHA256

e12fbdc49ddf20c6e3a8e6ed65dfd37581b745c3dc3d2712d7ab0be73f720d27
SHA512

7ac0b3195f3717440135f30642ff0c891eca68443756656740e161e2bbbea67f10bd6ec918ee6e26d0e1037a4dae997893097d21261c02b1b1af81cd88a3a92a
SSDEEP

768:+kKewD79RXACSxoTXfMhfj/AOYvnNt6mMPo:+Rncxobf+oxvnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04aaed9d026e9bcd5be054e38456fa6b

Files

04aaed9d026e9bcd5be054e38456fa6b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook
pt_ksHook
pt_tzHook

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ