002c83a4cd75f7a96ae982eb9bb9244d | Triage

Sharing

General

Target

002c83a4cd75f7a96ae982eb9bb9244d
Size

23KB
MD5

002c83a4cd75f7a96ae982eb9bb9244d
SHA1

551d86834fe6c72955d1163323aa82671a57579b
SHA256

a856d877caed42a8f4e3492b2461bdc69e12d4cd7ed0abb3f82b70632d88ccd0
SHA512

804b5b9c49883ae5919d9443cadf374c89e0dc95fdcaff2a7bf70f178c848f52ee3e65e29f545287bd9d8d2749bb0b27e535bb9e3f9b7af50dae54f3f79a0633
SSDEEP

384:5PyZNjtU2mzQBzvyNhUbA+Y9HajR33Ectq55s4zEiY9rVQb:RyZ66Q4rYZ6R3vtqPsYEiY9ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002c83a4cd75f7a96ae982eb9bb9244d

Files

002c83a4cd75f7a96ae982eb9bb9244d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
a4e5b47ec457

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ