000c52868aad942fb55abe02aca31a41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000c52868aad942fb55abe02aca31a41
Size

21KB
MD5

000c52868aad942fb55abe02aca31a41
SHA1

2821d35bc40eff6be049cbad7c2a4b9610b1d828
SHA256

daa0780901f1dc0c5077081597456a9e6196d692d34c2d268bf7f2ec67a60427
SHA512

2ea3a16bf54e8cb20a304b3fe9fc4a4ce19c9d96b01f61844981dfc57ac06ac4fd194f8104e003b9d3bba38083dd984bb2625a9c153bb9c117a3a63c6665c825
SSDEEP

384:LpdNjtU2OCN4NUvSDJYC9RqQPsd7mwjuIhxXnWzwZOFb0spUvnKl:LpdSX1rVPs5fPPnmwZqb0RKl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000c52868aad942fb55abe02aca31a41

Files

000c52868aad942fb55abe02aca31a41
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFif45all
UnHookWindow

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ