01940b763b18609e6e66959bd9a71db1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01940b763b18609e6e66959bd9a71db1
Size

24KB
MD5

01940b763b18609e6e66959bd9a71db1
SHA1

9203717d1b1b805308addf34cf1cdb0362ff9a18
SHA256

baf5052684f8b1449e2022231ac0c1afa452531aab842cf549850f76ebf3bc5a
SHA512

9850e4ba155f3cd9fe563b7bc76b6df4243ddaed4b773460b5016bf6cd777bd79bb5c6b62057de00c3f89b5c3e090afba3d042f13c2176cf686931deb79b18f6
SSDEEP

384:VidD9d6GAWaAxboOe3TgPkSinOcSKVsT5PcWrTf7Tj7A5EitlkezxIaNNAvDj:UeioOeOdi5SCsGWrL7v7A9tlkOxIaNyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01940b763b18609e6e66959bd9a71db1

Files

01940b763b18609e6e66959bd9a71db1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjlsj4ejfjsv

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ