00526fb8a015ddf5e1f78f83477519a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00526fb8a015ddf5e1f78f83477519a8
Size

23KB
MD5

00526fb8a015ddf5e1f78f83477519a8
SHA1

1158340e8c7eebc993761bc15fd963ae058f363f
SHA256

7d6f97e45bc950b112715b5baa8dea3a75c004d27146a87a43f3399ad73f30cf
SHA512

8083f84422da762cfe5f2c75c08ce9d937922a3713b9e5d63d9882d0f89d3c99d35f17f76b741f1a0cdcb39ec465a2b5bf88e975bddd7499f50133ad07a50ac6
SSDEEP

384:kidD9d6GAHQBrJq2xaak+drIJtjcOtQEnyz6neVK3Sv:xuy02LeJZlt06nkKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00526fb8a015ddf5e1f78f83477519a8

Files

00526fb8a015ddf5e1f78f83477519a8
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ