00057a6ba22275e82cbe43474feecc96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00057a6ba22275e82cbe43474feecc96
Size

513KB
MD5

00057a6ba22275e82cbe43474feecc96
SHA1

0eed62b9354c9889fc184b82c7db769f43246a07
SHA256

cf0ae215328d6d31713b26ec4a87e61787d8e3b61649f0512a5c2d45a3895fa6
SHA512

b8b82cb80fffd33e4ed92bfe75aa5605935f80c4c412af56798ead4a38229507352bea22443e192eb09f90d4d25f83b166edf1d2f9b0fee6461e8eeb3baed91f
SSDEEP

384:aidD9d6GAKWQ0lnbefJe/KxV3f5nSAm+V85htBICahKj3BjGEZqkzEAftlfyw6:bOjdefSKThSbo8xxjckEAftm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00057a6ba22275e82cbe43474feecc96

Files

00057a6ba22275e82cbe43474feecc96
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ