01c3996129c155524add7fcf80c77393 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c3996129c155524add7fcf80c77393
Size

19KB
MD5

01c3996129c155524add7fcf80c77393
SHA1

d2273df016b4f94f20420df141f9973b6aa3d535
SHA256

740d6f875735c5b1fb3661c50811aeacaf6bb1591e776d6f64b6b8f6012e1a53
SHA512

87830482a39475b6cb340a5bccb2cd13572d5afefc0b0765de60bc063f4f5a172872c52d46ccbe73b673e5009dba645b887836015946e177d82ba87668db5b8f
SSDEEP

384:3yVlNjtU2e2lYJ9g4iB0+hfPx73rbesCtfvT90FCg6h0OTAgzEZtemOn:CVlPs0by790FCgghEZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c3996129c155524add7fcf80c77393

Files

01c3996129c155524add7fcf80c77393
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ