1112e1e04d8c4281fd7b894524cbfdbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1112e1e04d8c4281fd7b894524cbfdbc
Size

38KB
MD5

1112e1e04d8c4281fd7b894524cbfdbc
SHA1

7a4234b7126ceb71ec413217345956c2c68b2a76
SHA256

ff5bac6839c8971c8e8933e1b49b39b7c51c1b35e034446f70fed43ee468cf9f
SHA512

dd9be7aa329dd441f7670bf44eea67b4a95841822ebda7dfa11b47de377bd95d959449b56ad5aefc2326c1d554e0c7799b11357e45f3235a15472e558695fa28
SSDEEP

768:KQCju6uq+Vsz5nG+iE6DU8zrJVm0mRfPDQBrStG9ZLiFUtHq:9pq+Vs9n4BgWr/4rF+Zj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1112e1e04d8c4281fd7b894524cbfdbc

Files

1112e1e04d8c4281fd7b894524cbfdbc
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ