10d569ffab5f958d552693f23c1a103b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10d569ffab5f958d552693f23c1a103b
Size

31KB
MD5

10d569ffab5f958d552693f23c1a103b
SHA1

f81202c223b475fd007b1921f666c8a386c78a42
SHA256

efa35e0554c8c0352b1859acf1b851d225f06510457bb94ba5c66d9ceb2a47cf
SHA512

bdb892401dc6d9f647e288ea66b34126f9c96865ec6eb2d1a78605e0abc857f8ef1871d7a0ce1eb7a0615acedfc29c02419331cde9d522db8a6811d8f05ad952
SSDEEP

384:lecgmUTUCYOAS9xaAktWy6RCKxhJgIZDImResxUG5PSTv8LbROkLoQvRAS9y2ihc:qm4UoAfAbGGesUbgFpvRi29b/Ov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10d569ffab5f958d552693f23c1a103b

Files

10d569ffab5f958d552693f23c1a103b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ksHookwo
tzHookwo

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ