018e936ce329ae19dc33cbde2413bdfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

018e936ce329ae19dc33cbde2413bdfd
Size

20KB
MD5

018e936ce329ae19dc33cbde2413bdfd
SHA1

5873fd8b84f3fdf2b86f9f7c5ab270df359fc221
SHA256

bb331394ea153c04846f68feb30702850bd013f644edb019f4d8ae5fbaf39c8a
SHA512

cb3c8ed804e888352a6663240e207b44f3698fddc543ef1dc067127339e4d4c594a96057786ab9e5c784ed9530be54ce202d33d68ef4aaa4e3932e40372d0782
SSDEEP

384:JyVlNjtU2eKlIgchEZdBs0drpVuCDwKVX6AFwDR6XvzEZGtcZ7k:cVljYgdu6nrNwDR6bEZGL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
018e936ce329ae19dc33cbde2413bdfd

Files

018e936ce329ae19dc33cbde2413bdfd
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ