001e1deed4eb4f234e50fa0d8fc29c2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001e1deed4eb4f234e50fa0d8fc29c2f
Size

23KB
MD5

001e1deed4eb4f234e50fa0d8fc29c2f
SHA1

51e5897f0881a4e4f63d5e67efb464d451fa7f7d
SHA256

b33db9b03eebab3f357db50c9ae65ae09a454b3f9ff405cd8b252cde942ccf8e
SHA512

c537bf0fe08cdd38ce1097da4a5b7587cefd1e40b8b0431b7254cf85ca4482952614e73d8e3dd3424e0f6fc2e7e6a0bfa1c0f9c83a85747d3932a4f056fd1df2
SSDEEP

384:MwidD9d6GAn+4ev60CRT5OFASfnlBvYQblYEjbdkZvJHzxikIszjBbS:Ml/Cd5OFBnltzKkybTxikIEVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001e1deed4eb4f234e50fa0d8fc29c2f

Files

001e1deed4eb4f234e50fa0d8fc29c2f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ