0912bb4e614315ef77e1abcf1772ace3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0912bb4e614315ef77e1abcf1772ace3
Size

41KB
MD5

0912bb4e614315ef77e1abcf1772ace3
SHA1

55fb620b952505c5f39886961edd82bde8c8bf95
SHA256

4d8b4b8984e5b188fe59ae2ae6028aecb6bf476a0ceed6dda9646c163c0dd10f
SHA512

617203b62bc70ddb0e2652581830b6330c6d7fb015856dafb1951aabb19591f39f1c5d480fb18d423f09bc05e453376b1afb461a45390ffacfd8fc2193390414
SSDEEP

768:+RXSe0wUPkXxlNOVVLNS/N4S4NrAQmbFuZHw45SjHgIa:YXSaB/wNS/NmlZ8AIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0912bb4e614315ef77e1abcf1772ace3

Files

0912bb4e614315ef77e1abcf1772ace3
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook2
StopHook2

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ