0011ac9ae7313cc6e1dbbb29241cbf77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0011ac9ae7313cc6e1dbbb29241cbf77
Size

21KB
MD5

0011ac9ae7313cc6e1dbbb29241cbf77
SHA1

75761ba3f1a449395fb9032ac1910c9ddf071045
SHA256

8af3950a5d2ecd85335a3426a8d608d9820d349b2f1d8e96c91f501c384ce70a
SHA512

2364eb30f0c094d12cd751ae23b1bff1b2b03dbbca6592499d17412cf353561971c3e0602bb9192dbfdc6cf0096cb7eb495fc23f5e5b3ef34861b6ce5db9b488
SSDEEP

384:7pdNjtU2OCN4N9m38CNRamIPsL7TCjtsXnWzwZXzV7crYI:7pdSsbCPs/OtQnmwZXzVAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0011ac9ae7313cc6e1dbbb29241cbf77

Files

0011ac9ae7313cc6e1dbbb29241cbf77
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFif45all
UnHookWindow

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ