0f506a06fd16def98f5e82ab4cc30a6f | Triage

Sharing

General

Target

0f506a06fd16def98f5e82ab4cc30a6f
Size

14KB
MD5

0f506a06fd16def98f5e82ab4cc30a6f
SHA1

19ac6e0fe0d372196c27ebc9b32b750451c7e0c2
SHA256

eedbadb29fe6f8f992c43fcf873d011173538936d0426d41faed4185ed390178
SHA512

747b5f235c5ee92022ffc60e4b409830c3c1b75dd01c5fb5789f6a6e12ce8ec9c7188aec781d4ba86f063bae046f1e6bf294160f219c9a651de67a2ee9834f07
SSDEEP

192:6IetuiwVAxHkNJpg6nZusrBeQOrGoda2ALDeRjgduKwU7iidU2LuF:etcppZBrka2ku2iV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f506a06fd16def98f5e82ab4cc30a6f

Files

0f506a06fd16def98f5e82ab4cc30a6f
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

RemoveKbHook
SetKbHook

Sections

.data
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 653B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ