001e58e08d4b951e057f06bf2a6d03a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001e58e08d4b951e057f06bf2a6d03a5
Size

26KB
MD5

001e58e08d4b951e057f06bf2a6d03a5
SHA1

8ad568e395198afcbe2014cb177cefe0c3f6a505
SHA256

7006d5588dc6618e84ff58d55c55ba9fb3e715364aee2cc433d51fd72faafa04
SHA512

e2718e0db4e8d81d997f703ac0993dcede255879e6d9a5791cc90e783910f1d95af55b350d4f934fb7612b0d3b20f0cf3cd70919aac899f2aee826a273277087
SSDEEP

384:TdD9d6G4GwATw6C4PtutfKXbjOumW+uzjWSRFEswe4QXQH7zgZ2ThM:TnDXsfCZ+uPdRCe4x3gZsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001e58e08d4b951e057f06bf2a6d03a5

Files

001e58e08d4b951e057f06bf2a6d03a5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFif45all
UnHookWindow

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ