0bb3d1e1c7e2585460856641fc110315 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bb3d1e1c7e2585460856641fc110315
Size

22KB
MD5

0bb3d1e1c7e2585460856641fc110315
SHA1

b7d4ef1a4d4fb194d507580f555e60b0a83a44d9
SHA256

8d12e60bf0e5e2838fed99ee5593e83105fdd5b2dd70b068b19741d099471bf1
SHA512

63219bb29eac09638366552127e08c4eb8eeb953719606db4e618ac16558c1282e51ecef194ea5898ee10f86da963514cdbb6de81e892f982ea331e3e3e31300
SSDEEP

384:tPyZNjtU2mm4Hl5hKFWQ7eaQihzEXh/QaW5jc8oTzxiCNWgJJ:lyZn2uIQvQpDWV/MxiCNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb3d1e1c7e2585460856641fc110315

Files

0bb3d1e1c7e2585460856641fc110315
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ