091e02acca8f63acaa316ee1efcf43fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

091e02acca8f63acaa316ee1efcf43fd
Size

20KB
MD5

091e02acca8f63acaa316ee1efcf43fd
SHA1

5501cb7e334a3fc24595fbf2c2a577ead6372ce2
SHA256

23a5ab5b6141370d4397287d5a592519544d015e553a4ff3b6defc609e4f9ff8
SHA512

b37e5dad20648566d02bf5483ad061f6532fbc581e252c7fb0dbdd2e26e484b5efa42f53beadb2e5163a84531a625f6a27648760c1a8cf66bf8dbe223c77a362
SSDEEP

384:UPyZNjtU2mHIwsCxjvR0tjTgB7qqyj3tzEiqfrJmP:EyZWYAzR+4di3hEiyrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
091e02acca8f63acaa316ee1efcf43fd

Files

091e02acca8f63acaa316ee1efcf43fd
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ