0226e9149a8aa47b33b7328d727faaea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0226e9149a8aa47b33b7328d727faaea
Size

55KB
MD5

0226e9149a8aa47b33b7328d727faaea
SHA1

0863f84ed163c9014dfb05b02b4f896d3674e830
SHA256

dbc67d230054fceca49ac5996144d42602bf372df81cc874fcc08f679f6f3050
SHA512

dc25cfc75b0e85e973f243801e812a0ad17d57ab38e876ee07e76faf6992eec5b6e550855e0b7d56c77a7a85b69d4ae39a3f40e7fe879479e6e381a9fc427a72
SSDEEP

1536:BfQAl+7ovOvI7KkTtMSTzXXBWuF+S5SNj+7JjswyYnQ:dQAl+pvI7KkTtFzXB+SENjiJjsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0226e9149a8aa47b33b7328d727faaea

Files

0226e9149a8aa47b33b7328d727faaea
.dll windows:4 windows x86 arch:x86

d789bbd14d9363f075bb8a0efcaa628b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

time

user32

UnhookWindowsHookEx

advapi32

RegQueryValueExA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE