00144f9436fdd2b4173cca79461831df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00144f9436fdd2b4173cca79461831df
Size

24KB
MD5

00144f9436fdd2b4173cca79461831df
SHA1

7e17265df3f83dd9c760e658dff0f3786738f977
SHA256

96716021a43130c4eb40283d86fcea4704ecd73dec8a36a1063197f6970658f9
SHA512

6c9975aa3975161d94d5b109e9203fff2b5c4a99e6e601808d790d683e4061c0c9bc342b0c6271d75456b427eda187449e395aba1c189a5081bba432726e5654
SSDEEP

384:pdD9d6G4f/r1KeYS4oxgWZqVjgG2GCafj64BEHuazwIErIuCv:pKGkwVjgG2G64LawIEHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00144f9436fdd2b4173cca79461831df

Files

00144f9436fdd2b4173cca79461831df
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ