0009385b3f6c5a091396256ab6397e5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0009385b3f6c5a091396256ab6397e5c
Size

24KB
MD5

0009385b3f6c5a091396256ab6397e5c
SHA1

462d435c20bd1dd71fdfb8b45a48dff8add9bc2b
SHA256

701f0db9ee3797289fb3e44b0f162cc272d0b2847e5bf71d5af5447ba515b855
SHA512

f48918425fdd44137f9878286423f8507cbf4ab83e10d9340a830bad8f98af11c700ed1fe6ea999f983310c7aa2c3d4f361f3e664dd122655439486cdad2b266
SSDEEP

384:pidD9d6GAvmAxbyjq+5qKGs52psnX4+H9W/j3xYEiyzXeibn42:gXiiHqQ0snX4+dU3x5XeiTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0009385b3f6c5a091396256ab6397e5c

Files

0009385b3f6c5a091396256ab6397e5c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjlsj4ejfjsv

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ