1b035dcd1653e0491d03946e3ec20074 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b035dcd1653e0491d03946e3ec20074
Size

31KB
MD5

1b035dcd1653e0491d03946e3ec20074
SHA1

0b9849a8c8655b0e5c50443a9f69521829a1d887
SHA256

fa5be23945ecffa1df4ca4c7ed331dd587e791bef833b5046a054930e21ac165
SHA512

0d5441e19400e577d91b3ad22752222d98879c0cd665d34af0c731c46bfc8161bb0111c6c80eb7d03e2f1865125157ff778ca9490e81e248af176f8df39e2180
SSDEEP

768:zeZqj1szTFIIb99Qw+qgkcfI6F5lI5BufYWvk6:6Zqj1sXqdWAeWwwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b035dcd1653e0491d03946e3ec20074

Files

1b035dcd1653e0491d03946e3ec20074
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ