1c3c9e2192118703a03bb9cf73557b9e | Triage

Sharing

General

Target

1c3c9e2192118703a03bb9cf73557b9e
Size

523KB
MD5

1c3c9e2192118703a03bb9cf73557b9e
SHA1

fd5febbacdabc74be7182325040491e102cffdb6
SHA256

77e27e4809af5ab2dd4969bad60a270bb16539ba3f16888ea4f70838456f17fd
SHA512

a373885ae5aaa5d813141ff72e2979d18e0a642e575a3426c0b14b5415cde0911ae8461189bc6d8232d0d6c7b0336bfc8dfe4a9e671fa4aca31268452a1bb87d
SSDEEP

384:POr5NKZ2+DEU0RaSChzfiVLm91+wkoexcj1hhN1HHjfNrzwm3gDLzfXDYYWbRt:Gr5oDdhjiR+lj1DNv/3SHfXbWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3c9e2192118703a03bb9cf73557b9e

Files

1c3c9e2192118703a03bb9cf73557b9e
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow

Sections

CODE
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ