070d9e944f5a990a398abf17b193ada5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

070d9e944f5a990a398abf17b193ada5
Size

6KB
MD5

070d9e944f5a990a398abf17b193ada5
SHA1

80ccd03205f9601c5bf9077432eb934bd5acc1d0
SHA256

5d7bd9e4fdc86431e5f67b9216210e054fd8ae05cf038f04097e910336f4d9b7
SHA512

13b97bf3cf733159b5b079956e103d58665b98f278119178389d2dc58971f6bc1f81b467e090127139d1eed9182dcb99169650eea5248a4736203e73a0215822
SSDEEP

24:eFGSsQLPi3+lDz7qJawmciLXb5FtACObllEiJ6666666666666yD:iWyqUwmRlSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070d9e944f5a990a398abf17b193ada5

Files

070d9e944f5a990a398abf17b193ada5
.dll windows:4 windows x86 arch:x86

9c7aa472bac48d08fa2820ad606d281c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

InstallHook
UninstallHook

Sections

.text
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ