05109773724ba68c643d126e9df0ae36 | Triage

Sharing

General

Target

05109773724ba68c643d126e9df0ae36
Size

20KB
MD5

05109773724ba68c643d126e9df0ae36
SHA1

8687ea146519afda54d0e1b1b0bb9f61583dc1fa
SHA256

b73af49857cd38331b091093de5f899a8cf6969db4c76da8ff796819d0faa7f5
SHA512

e4e3151533b692f3af20e4ef31e16962769de97f00a51ec17f8471aacb760e91cd90f1ab0780ee62691bb631d2c4d76d48f0ce4e92f862bf880145575c0129ff
SSDEEP

384:ZPyZNjtU2mXQp8l9qQTh9aAV2vTh+0vY4lpoZjwG1Lzxsizpu:xyZ+BljaAV2v00v7l61xHxsi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05109773724ba68c643d126e9df0ae36

Files

05109773724ba68c643d126e9df0ae36
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fs448547aaaa

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ