0012e66e28f4836dbc688165df8ade89 | Triage

Sharing

General

Target

0012e66e28f4836dbc688165df8ade89
Size

21KB
MD5

0012e66e28f4836dbc688165df8ade89
SHA1

22fc8692c84f936da2d9c68ae2f9229a18239d15
SHA256

a0962a75db446f935df94bcd29a1d1eda6c9c24b666b574761bd42301e16d01e
SHA512

359907b6c500a690d705c0f5aada0d155f91fdb29d80a79c9947a10d2644800e53b00b6ae622c86fbc086975baf40ff19dbf45b2488e1190321d32d2215f3737
SSDEEP

384:aPyZNjtU2mGAbAJ/5g8XOP4bu73sMKhxApWm2BsjbluYn6zE7a4KU9Fk:ayZ/drtO4uzsJhm2cYYn6E77KU9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0012e66e28f4836dbc688165df8ade89

Files

0012e66e28f4836dbc688165df8ade89
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
gdf45kfg45fd

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ