079f04fbc5291f36d31cd83a44372d92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

079f04fbc5291f36d31cd83a44372d92
Size

24KB
MD5

079f04fbc5291f36d31cd83a44372d92
SHA1

ae8940b0c00d1f75d1c59ec35c5bbb727a898de7
SHA256

cba2fcdc0c8363ec412fd243d17332f328c641d016304255c051e4174feb55ec
SHA512

99ef02e54ea4306ccb79b2609865d95e7b7fa5b09fa51aa70aa4bb9474680e2a815b908943ddc10134940e7730ae0b0ac4e5db98a949d000b9f229e2d1b88a7a
SSDEEP

384:iO9xz0Cv0hqd+1TjQm7dfKhamjli/25uAvgQ2NEbciBz1B/lKtpeZP25Azsf/wR:7cCvsqdS3Q4OVY2HlKtwTsXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079f04fbc5291f36d31cd83a44372d92

Files

079f04fbc5291f36d31cd83a44372d92
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook

Sections

CODE
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ