01e445958434e90fb3e76a512776bf23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01e445958434e90fb3e76a512776bf23
Size

20KB
MD5

01e445958434e90fb3e76a512776bf23
SHA1

4663bd7462da129b831dd11fc331502d1ef8971f
SHA256

629f8c81f7b0af1c63d410c24d601f0280bf1f9dd46aff31353fe7e168196963
SHA512

6cb6fe1fe82d5439263fa241d31024a80278bba8a79cf45d7cb2eab2b2909cefc8537f1f8b08427fe50bd3d23af1b00f0c14e6853a784a61cdd280466ce89590
SSDEEP

384:5yVlNjtU2eKlIgcu/TwVvFLrjuu8qXxFBZw/R6EeIzEZaS8:MVljYuL2tZrw/RBNEZal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01e445958434e90fb3e76a512776bf23

Files

01e445958434e90fb3e76a512776bf23
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ