0149a6d6f54b927c0bcb6868d43398eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0149a6d6f54b927c0bcb6868d43398eb
Size

25KB
MD5

0149a6d6f54b927c0bcb6868d43398eb
SHA1

77e201cb0ff63370000b6f3cd44769561bc0d482
SHA256

b675973f643fe33d1e52e7b1bef4290dacbc55030679e0fe55130f5fcc84e129
SHA512

5fdb2dd74e6fc5f7f5e22b0fc60552e3c5459c1f67e80a0b98444577feaa11f3d0747dee4cb59b4d42884036e037bd082927d562ebd4e1957dca73abe85addb4
SSDEEP

384:1dD9d6G43iQQrPHE1hVaHKkumXVHiJj2YEPQc7z61rt5rnNY:1DLanaHrVHiF21TX61p5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0149a6d6f54b927c0bcb6868d43398eb

Files

0149a6d6f54b927c0bcb6868d43398eb
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fsd4534f5412

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ