162e26d6f48dbee4dad3fb71773f5664 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

162e26d6f48dbee4dad3fb71773f5664
Size

126KB
MD5

162e26d6f48dbee4dad3fb71773f5664
SHA1

b4f6d3dc41b80c8d6198621af31ba759d4161c57
SHA256

5d8c6a7b0ab5fc4d018b5c85fa418096deaf949600a0f780aef1d6ecc95b4232
SHA512

76d76601c9b8bd5a6b9082d61950c5d7cc01b5bef396e214fe7e0ec8cf33126c4aab84123e9fcef9dbd7aa961057922347d82d2f43756e3af181b790a428ab90
SSDEEP

3072:e6T+1r43p/oyukeTcxG1rAYjkPD5RcdqqGPkU/uqCl/i9:kaApTcxsUedqkU/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
162e26d6f48dbee4dad3fb71773f5664

Files

162e26d6f48dbee4dad3fb71773f5664
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ