0093c8ce0a05211449f933d73e618fc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0093c8ce0a05211449f933d73e618fc3
Size

512KB
MD5

0093c8ce0a05211449f933d73e618fc3
SHA1

947af2d0c9183acc61163c0f17503f1b8b904274
SHA256

7926cc47a633ff9feb65c73b820d10781ef3a8ae9abd574821626e893e056520
SHA512

0f102b4bf515bc3f485aab270ac940cbfafe30488ba34a0a546d25dfa5314034d61cdd035fb520f3f4682eba57c3cc542ae6be50cb6937c5532d1690f04bf637
SSDEEP

384:xyPyZNjtU2m654MLfyHKLLtjrYyZTlAbylvF3j1pfEE6uN2jigf+zXnG5R2fez:4yZ3T2wrYolQ+T1pfwuUjigmXnG5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0093c8ce0a05211449f933d73e618fc3

Files

0093c8ce0a05211449f933d73e618fc3
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ