00fec8d99d6b58175708a31d96aa2285 | Triage

Sharing

General

Target

00fec8d99d6b58175708a31d96aa2285
Size

20KB
MD5

00fec8d99d6b58175708a31d96aa2285
SHA1

9d81bb281975a5c62175250557984218df4a3e27
SHA256

307f434bc2388b368d5d9001c322ac640c2a3e69b29b421f68ff57b8ac60106c
SHA512

1a73fbe87cb6b20f31767dd0bb6623b390dc7e0f86d9953a23248d390c63aae2c74705452ef8358e51496c742e4aac69b6c8a15587dccde0538ace4f3cc4bdff
SSDEEP

384:5RdCyDzMqlWemQiCdwlU84i+okeRg3HCeXAz+EKO:RCysql/mQpzi+o9RkHs+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00fec8d99d6b58175708a31d96aa2285

Files

00fec8d99d6b58175708a31d96aa2285
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StarHook

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ