00449cf1be0f5a5e4af5e9d3e9484e2b | Triage

Sharing

General

Target

00449cf1be0f5a5e4af5e9d3e9484e2b
Size

1.0MB
MD5

00449cf1be0f5a5e4af5e9d3e9484e2b
SHA1

12ef94acf45b843b7cb40c1a3d17e5826d7b7c8d
SHA256

1864f13e48afcca9250b87f969dfb9ba3100196187560fd6068cdfa37360a183
SHA512

f098104c5d03ddac9d1065fc75f941c2c0e8fe4caf4d3a4e39cf71d3f139f5aafd8001e3f218d3272eea4d4adbae06e5ef42a414903918dc66dee6fd0a48cf61
SSDEEP

384:OPyZNjtU2mO4JDjhx0W9r8ZWefsoI8Emj3PCzElww1:uyZv6Vh8ZTk8v/iElwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00449cf1be0f5a5e4af5e9d3e9484e2b

Files

00449cf1be0f5a5e4af5e9d3e9484e2b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
S45pFireWf4l
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ