1cebadeef3bbb52972c3d3dbe7670b7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cebadeef3bbb52972c3d3dbe7670b7d
Size

523KB
MD5

1cebadeef3bbb52972c3d3dbe7670b7d
SHA1

4c3045f889a7c4eade613d8992d930260a5feead
SHA256

af4db695e32b424aa4ab547257ab9e6d366cc5df414ac2a5b0088c8edc1f0539
SHA512

c09a9336372b3ac2ca810989953af27d2d59ebbdf8208222755db5aacdcb10083f028244d01f2678a5235811d574ce6fc1a9b3d48d87e83ef81ca0d718aed207
SSDEEP

384:nPyZNjtU2mLJBhbji9B8CrSyNCaMlDPmhcHa51DXzDeR6kOYvD:PyZkHyrSBjDPY1DDDe0khr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cebadeef3bbb52972c3d3dbe7670b7d

Files

1cebadeef3bbb52972c3d3dbe7670b7d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnBHookBWindow
ge4gdcfsd1
ge4gdcfsd2
ge4gdcfsd3
ge4gdcfsd4
ge4gdcfsd5

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ