00621f7a04043930fcd2ed426e40b5bb | Triage

Sharing

General

Target

00621f7a04043930fcd2ed426e40b5bb
Size

23KB
MD5

00621f7a04043930fcd2ed426e40b5bb
SHA1

1f0ebede28ef97b0193712b3e3dcfaa541054f6f
SHA256

d1377d5ddd74c442985b9a930cb0e68dd2a2bc1ebdc193104b9b755b48d325b1
SHA512

2b96af651c384b6c815f41c32684b7de9e8d80584d6bd0e8b0b9e3d7007ef5ea0978ac4b98cba8cc0d862df85e1397c13501a8f4e7123f31caa6dbdf63b35156
SSDEEP

384:EidD9d6GAHQBrDdFI0EHjm+PRfQXjqY+JE+KPz6neb4P2Ujal3:Ruy/Cm6fQzqYt76nc4jG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00621f7a04043930fcd2ed426e40b5bb

Files

00621f7a04043930fcd2ed426e40b5bb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ