01ceaf7a3886fa7009ddd0a9a2f1b952 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01ceaf7a3886fa7009ddd0a9a2f1b952
Size

40KB
MD5

01ceaf7a3886fa7009ddd0a9a2f1b952
SHA1

425bc63074509c923606430c0f0f6c2e880431c4
SHA256

79f7bac7a7264eaaa0956d8601eeb991300881217ac2de11e1250cb9fbaae459
SHA512

637836845c6a670a73e7549520326be26742a4b20d8187125d7c841b2f598e0740bd78d40c36a88ee56de2e43af2b31aafe9e7d3b31b8fc033276d9b3fb2446d
SSDEEP

768:9k3tGvM2JwiC1ctLEQYmRRdCPx8gpuOE9hdRt5JnLDddPW:9k3A02CiCWhEQYmRRdM4DnX5nq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ceaf7a3886fa7009ddd0a9a2f1b952

Files

01ceaf7a3886fa7009ddd0a9a2f1b952
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jksHook
jtzHook

Sections

CODE
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ