0a97b055f8ec696990f76f60121a0405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a97b055f8ec696990f76f60121a0405
Size

79KB
MD5

0a97b055f8ec696990f76f60121a0405
SHA1

e7fad700babb1e554a8d5144d4252661562789fa
SHA256

4b886d8d80fe0a66733dbea9ea3d0c56366290e9f72de1288f745547f3a2de54
SHA512

a183bfb1c08fa0ff90de462a0a156a69801f6f776a2dd5b8384f3264c7d2a5d1f2fd164621cda54a78cf12ce40d955ec846028a6e7c6b3b348eba362f5edf453
SSDEEP

1536:DsqwzswgY9WqeaGa9xY1Fd2+BEKQFlNoI5gipG0e0R5f732:AzfPGUYPd9EKoNJgCpvf732

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a97b055f8ec696990f76f60121a0405

Files

0a97b055f8ec696990f76f60121a0405
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookProc
InstallALLHook

Sections

CODE
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ