009a5c0b3a78cdc3862225f9d88c54cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

009a5c0b3a78cdc3862225f9d88c54cb
Size

23KB
MD5

009a5c0b3a78cdc3862225f9d88c54cb
SHA1

5b4c17affc11828bf55ada35ef5bbc124d2c5ed5
SHA256

f91426f338051e55a9f2d4588b629050fd97f322d0f5ebd60cccb5a59b6786d8
SHA512

8f3ef1479b83d9ac3de4bc962f934c6d0371014b3156e9f39d6b52eb1e156caae24ae8f42e84e0e932f477c9de9c60c3e8a8dfed367290123b75fa1becb38b60
SSDEEP

384:swidD9d6GAn+4ev6X0fskY1APP9Bv48Qbd5jkHps5vVzxii3LA3:sl/CsY1e9tgnk6Hxii38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
009a5c0b3a78cdc3862225f9d88c54cb

Files

009a5c0b3a78cdc3862225f9d88c54cb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ