0007a6071ff60c67419eb77d2f474651 | Triage

Sharing

General

Target

0007a6071ff60c67419eb77d2f474651
Size

21KB
MD5

0007a6071ff60c67419eb77d2f474651
SHA1

2df902a78daa409b84505457715cfa6354670a8c
SHA256

21ce79e250350adad10fd84080575be0b05946d7b872399b20f232298a90e690
SHA512

b8446255b8f157c116c4ca8605f90ab63150f1607c84593f580f334fc0ff92c4d395d300c8e9c9c8194103b413cd7f7b3b5ec55fe082b414ae61a7e34035f601
SSDEEP

384:VMPyZNjtU2mvIGj6OGFw/R9OCj0zETeBPvmI:V8yZup63y3UET4PuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0007a6071ff60c67419eb77d2f474651

Files

0007a6071ff60c67419eb77d2f474651
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ