0008ad04a50ff51a58f8a8db65fed115 | Triage

Sharing

General

Target

0008ad04a50ff51a58f8a8db65fed115
Size

26KB
MD5

0008ad04a50ff51a58f8a8db65fed115
SHA1

82c05090516a243ae0be6ef39da3613d6e0fff1b
SHA256

4eada834b9e64854b5424def54863d9edc7dd82c4223771ea36dac04deb5539c
SHA512

2b83c7578aa7e86a698183420a023403c78fce139fb87efe50b49d1045bbe164cf8dc5861bc3a2aea7423d987e20120c7a856a2ce9dd0f1fd25532a1da64f6e9
SSDEEP

384:ndD9d6G4q6glPDFXcE3DXn/RRKSu3QZZNqnKVFOJjv4CSExTzgI2DmBQG:naaFXc8RTfknK+vZtvgIEmBt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0008ad04a50ff51a58f8a8db65fed115

Files

0008ad04a50ff51a58f8a8db65fed115
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ