012d6a8746ffa4d1d1ab73c3462da6c9 | Triage

Sharing

General

Target

012d6a8746ffa4d1d1ab73c3462da6c9
Size

22KB
MD5

012d6a8746ffa4d1d1ab73c3462da6c9
SHA1

590e0725cfde81291e226c25c993eb8ffbba70f2
SHA256

a0a42bfb13e17604545539945c26269ad00287994e6cdbaae81b137276fa66f2
SHA512

35d7ac7e1567dc949c189be81798f1b7a70fd15f65430fb0856d3704556307d24c70f61d4c665b7c98e93f07f34add08f27db2f9b60028c4c8b1ead79e389204
SSDEEP

384:tPyZNjtU2mDgnT4/jwyqjKi4nohcy/XQPjIHzx3JU+8g:lyZ68WeK8VXQbITx3JF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
012d6a8746ffa4d1d1ab73c3462da6c9

Files

012d6a8746ffa4d1d1ab73c3462da6c9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ