00118c2db5d1cebd11f57dfd3cfcfcd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00118c2db5d1cebd11f57dfd3cfcfcd7
Size

23KB
MD5

00118c2db5d1cebd11f57dfd3cfcfcd7
SHA1

f6a7afa7ed283c10236d532e199cc0de325c34c1
SHA256

2769d903de964e41c2e7fd4284aee905b2c02b46d48a9416522770c63700feda
SHA512

daeeb6c0acfb5a52b4c55f4aaa7440565f70f7edf8df949f16bf269a52a148bc772f433eb3d312a0559fb042d982ec242517b9740df4f06b277bd159abd08766
SSDEEP

384:DPyZNjtU2mXAxbKcB3sv+Sp8XHTfHZ+tg7twZ3hHjxGzxI/vvpn:ryZuiJAyjfHgtghCDx2xI/vRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00118c2db5d1cebd11f57dfd3cfcfcd7

Files

00118c2db5d1cebd11f57dfd3cfcfcd7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjlsj4ejfjsv

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ