1bf8be0cdf8cb1f56142f1044040a00c | Triage

Sharing

General

Target

1bf8be0cdf8cb1f56142f1044040a00c
Size

19KB
MD5

1bf8be0cdf8cb1f56142f1044040a00c
SHA1

a98a0518dbd695589fd0537db1a39d22ab381de1
SHA256

bb44e81fdc2dd1d36968cbcc40c87d7e05e94f0743e7b914918e1d639137f1b3
SHA512

6e25951f86b5e7ea746e9e300559f8636ab7b82243bc16ad37856a4f38e17ad65dd06ebaf31e9b57ec12144c5e88fd422e120fb9301f0a4d36fae9f4aaf1a3c7
SSDEEP

384:Uau0NKwWJErIXY9vP0hkFqQFSE4IkZjC+opEhzwHmYYOsoTLMlB:tu0B+Y9v8hcF6Ik1CTqlwHA0TLMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf8be0cdf8cb1f56142f1044040a00c

Files

1bf8be0cdf8cb1f56142f1044040a00c
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ