000f44aeb9b8938235d821d62f6b7bf7 | Triage

Sharing

General

Target

000f44aeb9b8938235d821d62f6b7bf7
Size

23KB
MD5

000f44aeb9b8938235d821d62f6b7bf7
SHA1

b0a4449af048801157a42d61bdba2bc4061372c7
SHA256

6e2250ab10d5754e5e0d47908034a0e7d4389521ee1d2d27a077cbd61712b983
SHA512

52babbd798574ee74405220339bd14a36d37e001b150df1c3670397dd83b378d71cccd604bcca8f791061dd82d695711858d40bbf2ed84922938d60532a40385
SSDEEP

384:KidD9d6GAH64+vC8hBL3qQ9yL36QA9Z1XaMN6nAjHAfa5jEqQ5zvtN4hI:Lr6WdqdLKQ+Pgfa8dvtN4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000f44aeb9b8938235d821d62f6b7bf7

Files

000f44aeb9b8938235d821d62f6b7bf7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowA

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ