14e25dd190e6d71203669269dd09d0f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e25dd190e6d71203669269dd09d0f5
Size

22KB
MD5

14e25dd190e6d71203669269dd09d0f5
SHA1

34a43fd7d4b5d69ce88e6ff85bdd6d86481c4b0f
SHA256

3f66e43e6468b0c8ac267cdb045aab30daf57a3b10b2533fe06e12162418c707
SHA512

a62795c3a7c35a643e0d7587b950aaebd1fb4fc98b830d91f27c9dd557e3d597b24b3684be0eaa83f2af4a27ba49a8c819f9b81450d15649552fb1770e1b6f3a
SSDEEP

384:ahPyZNjtU2muYWCwgEwR3HiadMEw4fN1Pq6q9YSSSNi2OrjHjEWJBuFzEdAwAguD:KyZvQw+R3CaPN1chsXVJBuEdK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e25dd190e6d71203669269dd09d0f5

Files

14e25dd190e6d71203669269dd09d0f5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fslj423j3423

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ