006e4c80e9261dfff3cc42426a399b19 | Triage

Sharing

General

Target

006e4c80e9261dfff3cc42426a399b19
Size

22KB
MD5

006e4c80e9261dfff3cc42426a399b19
SHA1

32e6ca6189bbf12324ffe72b34a2f5f9cf03018e
SHA256

9b6ab1df5b1ab66fa22290fcfde5898d9ced088364e17aecd986c334facd1afe
SHA512

02138130e59b4e419dbd97e775a0f37868f196cafcc7d001aad11db4062f8a2096505ff9f7571845a1c767158165a5d6c6d872d30356f02c581c430250186f87
SSDEEP

384:7PyZNjtU2mHABDcykkzdEmKVF0kjxh7czxT27C2:jyZuabkEEnVjToxT27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
006e4c80e9261dfff3cc42426a399b19

Files

006e4c80e9261dfff3cc42426a399b19
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fs448547aaaa

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ