004ae57ffc6303126902c4e53f2ce940 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

004ae57ffc6303126902c4e53f2ce940
Size

511KB
MD5

004ae57ffc6303126902c4e53f2ce940
SHA1

b2f986cc799729e9606ed6572ee5af492fccb2c5
SHA256

6c3130e488770984d3cdfd6929e0a0957dc497f614e6b486857c9bbcfccdc201
SHA512

acaf130c183daf5960d91031c2d545ae0673e8f8c76e57c13b65504b0bdf0a36db1fdf937bf931605d01e2f0f11ea67945ebd80eab2b5838e1066370ee4f1aa4
SSDEEP

384:sNpdNjtU2OCu5fNQxvMAS0sgLyAenl2+jPEvd0fEliirYTlz6nU8LsBDu:IpdGVQ27A0l2+PE10cI6nrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004ae57ffc6303126902c4e53f2ce940

Files

004ae57ffc6303126902c4e53f2ce940
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ