0085c4df4c5aa5627c345520bc59f077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0085c4df4c5aa5627c345520bc59f077
Size

21KB
MD5

0085c4df4c5aa5627c345520bc59f077
SHA1

b07eb55336059734f228c282771182911747b416
SHA256

bb7a9fc2b61c8253f1089221aba375d5fc1f37064d4a0c2e2d36d4deb3e85454
SHA512

21faf448fa19b0e19b6fe644ef50c47b53deeb5bd0a30a35270dffce315584cab9ce46171e0b42f7aa5f9b1539a4fe0c1d74c047b878211c351627161ab45d03
SSDEEP

384:VryVlNjtU2eNYghCj1L02Qkf/NJUdrOjWTNH1dzELejXCH:V2Vl/zhjApuCNH1xELejG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0085c4df4c5aa5627c345520bc59f077

Files

0085c4df4c5aa5627c345520bc59f077
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjj4u9fdjklf

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ