00880c9a3548f058bc8aff92cb341b4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00880c9a3548f058bc8aff92cb341b4d
Size

35KB
MD5

00880c9a3548f058bc8aff92cb341b4d
SHA1

dabdd60203d50d33f8e06bf3cde441b404384241
SHA256

44e3f11fd15423a0a2af4b2d3c5a65b883b21f6c9163913370e795d3118f168b
SHA512

4f804994fd6bb5a2df708955a0acbc6a8d3c9a27f4816f0020e701b2b3b1059bd800da19853d6c671e4fcef5e534a0dc15f2b74487164a7f53cdf2cc549abb68
SSDEEP

384:dqVNjtU2+jDSxaTW36ElKxGBhWf25oS3cui7kWyq1zED8DcVe20c0c0c0c0c0c0v:8V+g62c8/5WNpEDw2rrrrrrrrrrrrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00880c9a3548f058bc8aff92cb341b4d

Files

00880c9a3548f058bc8aff92cb341b4d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ