0c8df70ad41153a41f54975a366cd505 | Triage

Sharing

General

Target

0c8df70ad41153a41f54975a366cd505
Size

33KB
MD5

0c8df70ad41153a41f54975a366cd505
SHA1

406c0d4b82102252f53ec2c86b4fd4f21b28939b
SHA256

cc4357d68c9f101189e0e4a568b426f08bd3c1b3da84da873eaaf44c7455a53b
SHA512

e65a516eeee89ce60a4784a3a228791982ceae0020d40c7084301856bea8cc03d313590bf30fe5d29ec24c9c14bce669ceca70e3442367725cc76471fda44edf
SSDEEP

768:MeHqE1szHLkodKZXi3Jra0FU/pmpbdWKQYPHnPJ2ds5ilYu6g58u:nHqE1sYXY7FDRdWmHx2ds5ilPz5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8df70ad41153a41f54975a366cd505

Files

0c8df70ad41153a41f54975a366cd505
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ