0cecc7c1dd92f27a2cb5de3bce181c7c | Triage

Sharing

General

Target

0cecc7c1dd92f27a2cb5de3bce181c7c
Size

19KB
MD5

0cecc7c1dd92f27a2cb5de3bce181c7c
SHA1

83ec53ad34fb69d848bb8120b9dd29b558aa8284
SHA256

f66a7271a313459b49248101495da627ec804bd245ed3de742648c3e851a325d
SHA512

7fc40b56a2d94ff801257e84ccd8352dd818c49fe530759e16be5247ffff2912ee909f72c933156f97b5f1e55e46ae5dfe27da6bd81940ecbf9c8aa4e818aeef
SSDEEP

384:jOr5NKZ2e1YUSenmmMp9QQ2jCKTr8zcx6YYO2f5B:qr5grcmmXmYcxEzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cecc7c1dd92f27a2cb5de3bce181c7c

Files

0cecc7c1dd92f27a2cb5de3bce181c7c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFi2eWall
UnHookWindow

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ