0148cc5eaf405821d59a5c44afd74215 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0148cc5eaf405821d59a5c44afd74215
Size

21KB
MD5

0148cc5eaf405821d59a5c44afd74215
SHA1

70c7a01fff8eec7941aa87c00c4dbaee7d78e129
SHA256

1cb3db09ded984fb096d9846139bbd30f1218211ba282853fd997c3748858364
SHA512

1c4900454f3f77ea13ffd9c3577579e76a7a6b18367fe31b1c8076498bfa4fd53a83990eaeb404494c1730c2003145907c428f2804a57f7911cc2ececbe07b6a
SSDEEP

384:81au0NKwhdrFHGKemrI7w9QSWmjFt9W1pzwueYYOOI:8Uu0ZFGKi7w9QSnFtEwu4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0148cc5eaf405821d59a5c44afd74215

Files

0148cc5eaf405821d59a5c44afd74215
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFif45all
UnHookWindow

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ