0007e1ed1327916ffde68dae9b4c750e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0007e1ed1327916ffde68dae9b4c750e
Size

79KB
MD5

0007e1ed1327916ffde68dae9b4c750e
SHA1

4fbfd49091a2d19c43b52ba5b14c0001d3c8a10b
SHA256

e6f8161f4bed0be1e285a1a804feda234817b56fadcfa8d719eac32d795d448e
SHA512

e26e8b91c78845d4e4d74eca1f6dd388d785ab4626c3f75f49a9f59ecbc1ca950d4c08c2e230aa36568734cd52b785c2e158d7a9ee7b1e6f3bec45876b159b36
SSDEEP

1536:BfQAl+7ovOmNfQ2ILsIvHA5WNs9hMyjgY5fUYRILMkCOgYWUokWeRik:dQAl+pS8H1s9hMyjgEfUjMkpgYi9OF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0007e1ed1327916ffde68dae9b4c750e

Files

0007e1ed1327916ffde68dae9b4c750e
.dll windows:4 windows x86 arch:x86

d789bbd14d9363f075bb8a0efcaa628b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

time

user32

UnhookWindowsHookEx

advapi32

RegQueryValueExA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE