03d1d96fea3dc836a7f23e32c07dd0b1 | Triage

Sharing

General

Target

03d1d96fea3dc836a7f23e32c07dd0b1
Size

2.0MB
MD5

03d1d96fea3dc836a7f23e32c07dd0b1
SHA1

7d8fd8fbe95bd41c3b3725dea602e09464d372e6
SHA256

a65dca755196b310c25affcb5ff4eb7f9f27d51950f788683868afb821cce9b5
SHA512

8883303539423ada6704ed0d01e0f1380df84a444856c51f591e449904d66da89b8301d801fe559a6ba5fd4700da7f9a0094200ba520d6154d2a62bddd7a0922
SSDEEP

384:MPyZNjtU2mvgkfb3yHdXrgyT/VbFAH0j4TtEswwzEicq3dcs3:8yZmDfuVJTVFj4TwQEicgcs3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d1d96fea3dc836a7f23e32c07dd0b1

Files

03d1d96fea3dc836a7f23e32c07dd0b1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindowB

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ