000420b0802ee91c281a0ca9f14e3321 | Triage

Sharing

General

Target

000420b0802ee91c281a0ca9f14e3321
Size

25KB
MD5

000420b0802ee91c281a0ca9f14e3321
SHA1

89ee5c1bef20edfcace2c6258e9ea0112b678869
SHA256

c2e7cc001758249ad18c6770f12d923f23deb786da853882bcf297909e7c8ce9
SHA512

8a137a49a7b809795e7a701e151140bc3efb25c475d335f59d3faa6d2f86e39bdcc123ac6657e93a3b8147dd25b77e6d2453293971de29d74468b077c64c32d2
SSDEEP

384:ddD9d6G42w58MiixaTN7WV/Y7cTxR0zxj+FQRNQWjt6ZuuZNzXtuFnEhR:dHegixaRYRoj8G0suZBXtKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000420b0802ee91c281a0ca9f14e3321

Files

000420b0802ee91c281a0ca9f14e3321
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ