051e336e2ac8b6e603b3933fe416da80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

051e336e2ac8b6e603b3933fe416da80
Size

19KB
MD5

051e336e2ac8b6e603b3933fe416da80
SHA1

2c8fcadb5d1f1a97a9d20192e73a0a7ed7f06377
SHA256

9bc61ed2aa5880b3734f26d45be9affdda101172abe7a2fb97f545b0a158d389
SHA512

9b0383902e080449005c699e5779b09036b99422b145d064df000ba4088a18c896f6f0ec255eb514b47c5f4db41c1b6d8b1654942a992036fdf621cadebab42e
SSDEEP

384:JPyZNjtU2m9UwpFfD67EVjJDnuCIt3lxd8j4eJFzXy5e1E:ByZjUh18zt3/dM4eJZXy59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
051e336e2ac8b6e603b3933fe416da80

Files

051e336e2ac8b6e603b3933fe416da80
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
a4e5b47ec457

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ