3b3ecbc98000f37ab085f36db3918172 | Triage

Sharing

General

Target

3b3ecbc98000f37ab085f36db3918172
Size

7KB
MD5

3b3ecbc98000f37ab085f36db3918172
SHA1

e820fc4a9d3aec8cd410ce5c4683e64fc13e9f19
SHA256

761c49122bcb7508736d294eb0196f9e5154bef243207de98fab37428dc9f754
SHA512

2efed6e0b4f6c0e2392fc83007c952a3469e3cfeaa72cc8380236a6c7bc817c63b5253a389efb766c73572b0c2c4b41cbc555255e327cfe206f9c1778f447f75
SSDEEP

96:/dlhi/yzm0HuT0ImD4tecrb8G0QQ4Dsa3lyW/+7y+4uo9h56b25f:V4yzzuT0OtWGJQ4Doe+4uo9ubS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3ecbc98000f37ab085f36db3918172

Files

3b3ecbc98000f37ab085f36db3918172
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SetDIPSHook

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARDAT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ