0c765375a7a615d856c8164be9a188c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c765375a7a615d856c8164be9a188c7
Size

20KB
MD5

0c765375a7a615d856c8164be9a188c7
SHA1

acc457d1ccd0b0e4cec4b171c6e736b3662d3f53
SHA256

e9750ba34cfd2098d078a9df2af9fd26ca99fa33fc16c696141824fa8409fea1
SHA512

bbeaf605aaa0ea9655950f0725e697dd18498c2e998ea217823cb6aeb2c7d7c9c3b7bbe0a1e472966edade017c874f6d077ecabbf0cdf1d0d265895dde756fee
SSDEEP

384:VYp5CWDxDT4uB2QNiegjYV63SjWJ2WoLhHtxwiQRiX9jIWqmKiQziKyDTa9:wYAXNiwV6IWJ2WoPeiQw9jpq/Lzip6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c765375a7a615d856c8164be9a188c7

Files

0c765375a7a615d856c8164be9a188c7
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookActivateWithMouse
HookCaptureType
HookCursorData
HookHoldTime
HookInstall
HookRectangleSelection
HookRemove
HookStartRecording
HookStatus
HookStopRecording

Sections

.Upack
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE