0379608e85d0d2ee3b17b31d00613ab5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0379608e85d0d2ee3b17b31d00613ab5
Size

16KB
MD5

0379608e85d0d2ee3b17b31d00613ab5
SHA1

7c5e72293dca62b947f2753a2a0c9fc8f9435d37
SHA256

c3c8f6a089ea06d94c1251fd6c2285e55955908d06ab35175c833369663cd4d5
SHA512

0452b3f235f91e10e706af8ae3f992488f2d883183b1ee02c8d9edbf2737714c7f7f8821fa827e11d0e4fad057a51485b92229a2609aefed2fb9909940a756f2
SSDEEP

384:496ztqCDwUmFHCCB+cScYZj2abz1P5YYOzP:4kjwcIvY1n1P9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0379608e85d0d2ee3b17b31d00613ab5

Files

0379608e85d0d2ee3b17b31d00613ab5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
S45pFireWf4l
UnHookWindow

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ