000b12d29c52a14031aca3218f9c8341 | Triage

Sharing

General

Target

000b12d29c52a14031aca3218f9c8341
Size

23KB
MD5

000b12d29c52a14031aca3218f9c8341
SHA1

04badb996cfbec4cc4a55c963e7c6b64ea72fc6e
SHA256

b1eaa33eba6e1dba5ebd216e95db3c4c0a254f08cc0a661e659ca9b701715302
SHA512

bd6f529f0ebff12c9d37b524ba93d49c0fc64a1733e8faf6837a4975ea0c70e413caa168730e9988f9624701508334142365d49dca59c073cfca8589f38e4fca
SSDEEP

384:WidD9d6GAH64+vCIRbu06aosroAMneCVFCMxjrmDEBLhsHzvtKof8Fy:Pr6IIXavrozxdrmwL2TvtKS8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000b12d29c52a14031aca3218f9c8341

Files

000b12d29c52a14031aca3218f9c8341
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ