000500f67c82cbdaae5564faca37ac26 | Triage

Sharing

General

Target

000500f67c82cbdaae5564faca37ac26
Size

26KB
MD5

000500f67c82cbdaae5564faca37ac26
SHA1

829cad9c69d3f9a75335d496b5e669e079f6bd68
SHA256

bd7706a1ffd1c971aaf8e62c7a9d1f2e470448a746608d081e24e8613b7a1a1e
SHA512

93425e305297c0e022118851112252837f86e4f5a965de382c4c99b8e239817b632d75e36cc4dbe7ad552c3c94e68ebebb6232c35bc0f4424f677be6102cbd98
SSDEEP

384:8idD9d6GAfwjeIL8RgidFqOg1CPfI2VGuphKaK94ySyC1J6qjMBqrEs2HzuUiALH:pG6ekDGqZ10gHupaBBqMYP2TuUi6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000500f67c82cbdaae5564faca37ac26

Files

000500f67c82cbdaae5564faca37ac26
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fslj423j3423

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ