01b489e78a2e3a929cb19cf3b884f83a | Triage

Sharing

General

Target

01b489e78a2e3a929cb19cf3b884f83a
Size

23KB
MD5

01b489e78a2e3a929cb19cf3b884f83a
SHA1

e4e2a158813e815eb4659d591dc31123e6df30b5
SHA256

bb76426aceb0a563ce9fe97f259fc83d974d19f01020a5d9ce7e87a635acb7a5
SHA512

41cea99c225e289a5c533e22f22feec107d474657c1e7be5c31b633c50307221321b6dd1e447b5604c6b4b3d676fcb0c3dc6c0641f9887f630ad68e501baaa65
SSDEEP

384:zidD9d6GAbQBzUj9ujev3svU24G/xAjo55oWEuzXAl1kaG:mS61js8JyoDoeXAlQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b489e78a2e3a929cb19cf3b884f83a

Files

01b489e78a2e3a929cb19cf3b884f83a
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjj4u9fdjklf

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ