001d7400555b8c469783dfd565b3a881 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001d7400555b8c469783dfd565b3a881
Size

20KB
MD5

001d7400555b8c469783dfd565b3a881
SHA1

a7c61010d0b386fbe5c882f8ea82db39be1cd4e8
SHA256

415ebe78c04ba92a5bdd8d5dee2dad2d9aea3b7792d0d1484365b85e4662b76b
SHA512

e03e8c7c290e2f1025001dfcf5880a30b4cbe13a72c25697ceb4558d244312e430e17093506f1f887687ff64c177ebc64074a044b5ee5ffa9467aecadb9e67c1
SSDEEP

384:V7Or5NKZ26AwjFXNK/Noc/+wS30IJmCByOjvG3up6JzEv2YYOS6Pt:Vyr556Q/ZSkYeuu3DNEvwd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001d7400555b8c469783dfd565b3a881

Files

001d7400555b8c469783dfd565b3a881
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skif4freW4ll
UnHookWindow

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ