007256ae6b0966532ce5dd7304f51192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

007256ae6b0966532ce5dd7304f51192
Size

23KB
MD5

007256ae6b0966532ce5dd7304f51192
SHA1

4fb5c8dc2654847d6d54f12862cbd306b6c0970c
SHA256

833a029b94b4bce8ccf5bab8d57978d78819528eec3232f166eae8f1d07bd914
SHA512

ddb60d4c977386b027ed0782343af1e8c846773ee32d62ddefee33e62a1ad3dae79b4adb3eaa99ab33e9d47458fe21c07af071df11db780fc4aef31a4739c4d4
SSDEEP

384:iPyZNjtU2m/QBrUyXrO5dmmopyjqMELKcCzEN8VwY8pk:iyZmyfGOpiqKENiwYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007256ae6b0966532ce5dd7304f51192

Files

007256ae6b0966532ce5dd7304f51192
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ