000d8d7ffeaf3621272f95f370614738 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000d8d7ffeaf3621272f95f370614738
Size

23KB
MD5

000d8d7ffeaf3621272f95f370614738
SHA1

0f55449f1fbfb4449b3b8c7062fb5c68b762c954
SHA256

e7a3575543f52808796e0eace50c7b3a2de26ec973ab2799691202431d44a6ca
SHA512

e45d2a8e062219f19b720ffa69c2d7cbb12b693293222ab8b1cea3f0cbd7f7bd49d4c65a44cdc8fad2de0decf72ff82cefd33679a069d6ecd839610bff1bd100
SSDEEP

384:OPyZNjtU2mfwj9CaKuMm8aE+OUgcdr2K0ygAqaq9YyyC6CdjV8qJIMdzEclAL0EF:uyZm6gar8az9gcR0yCR6CpV8IIOEcD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000d8d7ffeaf3621272f95f370614738

Files

000d8d7ffeaf3621272f95f370614738
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fslj423j3423

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ