0ca6cafcc7a73ec45a70d595fc0f3c7c | Triage

Sharing

General

Target

0ca6cafcc7a73ec45a70d595fc0f3c7c
Size

3KB
MD5

0ca6cafcc7a73ec45a70d595fc0f3c7c
SHA1

03c0c2b35e86685d138dc64c58f3b196d89430d4
SHA256

c19471c3387af1fdff9da20c3002139cab5aa773d3dd2d2b4ebf2f1fd9685a6e
SHA512

8aa426e00413aab5b466fa4cd2c57f63e0fa6f9aa828cfc77fab9b1e19838f2c3f9aca9e88254c45857e586bfebdf8a55d968f153c358ae0c5a4a7bdfa3fb545

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca6cafcc7a73ec45a70d595fc0f3c7c

Files

0ca6cafcc7a73ec45a70d595fc0f3c7c
.dll windows:4 windows x86 arch:x86

c56b251f2e1a6e5dbf73d5ede7fe44a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

user32

wsprintfA
CallNextHookEx
PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx

Exports

Exports

snlohek
snohek

Sections

.text
Size: 512B - Virtual size: 217B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ