003b69ecefb8380a926cb3d323b4d480 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

003b69ecefb8380a926cb3d323b4d480
Size

23KB
MD5

003b69ecefb8380a926cb3d323b4d480
SHA1

b68c56b16a8a55dfb28f922ec555bf6537f9cd15
SHA256

6de53a1143ee6894772cbe71b9d31c74879bbd51b94d232ae236a4047f00a64d
SHA512

b39b3bddb74a420b8a696f09dfb80e160a6755279c985fb466ed6348abdf1023dc03c754812b76a8e60c40763dfce9593f7296490c8cd3975624eeff2695b241
SSDEEP

384:RPyZNjtU2mvgOnyvzvIY0aQ966WAtb49jwxcLJEPObzEiFalrkSzaBy:JyZm67DQ96fGqHLvEiFJ5y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
003b69ecefb8380a926cb3d323b4d480

Files

003b69ecefb8380a926cb3d323b4d480
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ