006020ef859055fe53d58ef7c38d3ec5 | Triage

Sharing

General

Target

006020ef859055fe53d58ef7c38d3ec5
Size

21KB
MD5

006020ef859055fe53d58ef7c38d3ec5
SHA1

4bfa5a26997c1cae4703d272884dd59e7fa369c4
SHA256

b7d05a56738329f787bb5f64f4324d9b1c492996a56e7d4a234dafbef4cc45d5
SHA512

6db2d79f3479861617a7b171a2027d1881002384cc30c6b5ef19eb9facc5a89876e6ca6523b42251800308f0d498c49fbe57e5e8b2b8f9c6d8c55c24b6cbd7cc
SSDEEP

384:VVyVlNjtU2eKlIG7eWb5Dp6y0hw/m7MURyE6g4zEZnU4gSKA7:VIVljB1XKRyElYEZn8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006020ef859055fe53d58ef7c38d3ec5

Files

006020ef859055fe53d58ef7c38d3ec5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ