116298353ab1c605b35b7613d675c0aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

116298353ab1c605b35b7613d675c0aa
Size

31KB
MD5

116298353ab1c605b35b7613d675c0aa
SHA1

c95e7f437eb9a168341cd29e2153d3484cbd1726
SHA256

2a3c45988d6eca1327932164d84e77af8854179d032049405d933d3f6bec60b9
SHA512

3cc12532320cdf82204b4cbb79ba9c13e33ed9f276cfd6474abd8a625fe16a6370fc39dc32f96a9811b251f3af29d6f6ee9a086065d020131e093bf49eda0079
SSDEEP

768:fFe+Wqy1szsbuOCJkMXf+R5C4osXQVY1NH:f4hqy1s8C24f+9sY1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116298353ab1c605b35b7613d675c0aa

Files

116298353ab1c605b35b7613d675c0aa
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ