0bcfc258705cb58349bbda1fca015f5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bcfc258705cb58349bbda1fca015f5b
Size

19KB
MD5

0bcfc258705cb58349bbda1fca015f5b
SHA1

45864e737b3a0561cbd1f243649356b9813b75d4
SHA256

185a8f129bb841879358bbdb133fcb2fbfe2d2addee1c6b0ba9baa95a0fdfb8c
SHA512

646b5152fe4cf84c340553394504120fd93e6f4b260096797ffc85a2db3f534cbe4002ffdb8b67929124fadb6c78d8be02f5d1575a1be1acd4455239fd5d88e2
SSDEEP

384:4PyZNjtU2mO4MESERPBt0TLmlpYn3n0jjyL9jKtozElYY+:oyZvES0BqeqjkoElYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bcfc258705cb58349bbda1fca015f5b

Files

0bcfc258705cb58349bbda1fca015f5b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
S45pFireWf4l
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ