0022d6a3939b99754e6064239b0a70f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0022d6a3939b99754e6064239b0a70f7
Size

513KB
MD5

0022d6a3939b99754e6064239b0a70f7
SHA1

66394a8b5fcf212a4b4521a3e6ea672a577fb9a4
SHA256

46be77761ca5d383e2ddc758ded5bca0c3af49e149d1e396dcbe9333ae762caf
SHA512

e501841a7b103a0f7293cbb6e0a362836b7e45d967f9e83040de0a05100d1c317556ea53b9f0a1171d24a63a5c69937a2019a0504188d60db87da37f0ad6e48f
SSDEEP

384:zidD9d6GALyAEiD1tlaAwpunl7DUrPuqXnYjHShztEsr6ztxzZzoF4YAJ:m/DW1elQl7ArP14HUR6xN9oFZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0022d6a3939b99754e6064239b0a70f7

Files

0022d6a3939b99754e6064239b0a70f7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ