1e5d104de548cc4e582a819b3ec292ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e5d104de548cc4e582a819b3ec292ea
Size

20KB
MD5

1e5d104de548cc4e582a819b3ec292ea
SHA1

70e1409f3ef3b9539f6eb7826a32ff5bbd7664bd
SHA256

1357923447770d7a09f92a048b8f220919a8d58db9ef41d578d361430df4d3a0
SHA512

1427f7564434dc78ab882009af8d60a1bf74cc210d28df536fab0773b5e36e9c200e9c34042b9336693f12c23a9cb78269744d7d2ca65634ba1307d8c4d557ac
SSDEEP

384:7JOr5NKZ2Clws0Utko7IpPzV0wqoujzG4pj1Zrlmzxu9YYOQvIri:7Ar5k1b2RWwbYG4l1ZlWxuxjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e5d104de548cc4e582a819b3ec292ea

Files

1e5d104de548cc4e582a819b3ec292ea
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fs448547aaaa

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ