002035b89b5aee3728ae5f0d09b32b1c | Triage

Sharing

General

Target

002035b89b5aee3728ae5f0d09b32b1c
Size

21KB
MD5

002035b89b5aee3728ae5f0d09b32b1c
SHA1

ee44f71b84bc85adc3773a5e36374fc22e2cb5aa
SHA256

cd704d6666848c88f088858cc5e0643ceb13dd0a87b661f0b3aca9d0f953e191
SHA512

d321301da958d311ca723e967f82fa92efb741ad5ce99511f1f16248b1c8e76eedf67f4f8d695bd47363d832786112aca7d93a3f665cd147fb5312064df970a8
SSDEEP

384:xyVlNjtU2eGg45LxNdc3LDSBq24qkUh7VTsCn8EW76E962t8ziMgzEZqUYvAnNDJ:UVlmixNdc3IMM8N7PuziREZqVoBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002035b89b5aee3728ae5f0d09b32b1c

Files

002035b89b5aee3728ae5f0d09b32b1c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ