23102ea19f993634a2be0323d3bccc96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23102ea19f993634a2be0323d3bccc96
Size

4KB
MD5

23102ea19f993634a2be0323d3bccc96
SHA1

d2ad81ce0ac3c68d12b1de7e9a3c0be71880ba35
SHA256

5c817691e5b2f42445d925c3cfe789af6348694673d86160c340ac4daf6ea4d9
SHA512

68e6d5f5de297257fc91c43e015be9bb5dba8d1ff995797008b0610e8169a2d43a2c8f44aa97b7257427275dfc8cea1b4906d626dea262ce1f43a920a1807e0c
SSDEEP

48:aLSCqWYEECD4883HfhqIjFM3aGkH8lTc:H8D2Pt7H8lT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23102ea19f993634a2be0323d3bccc96

Files

23102ea19f993634a2be0323d3bccc96
.dll windows:4 windows x86 arch:x86

c16e3ad98348714afd0dc4c9e5df6d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
WriteProcessMemory
EnterCriticalSection
Beep
ReadProcessMemory
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSection
HeapAlloc
GetProcessHeap

user32

CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx

Exports

Exports

Hook
Unhook

Sections

.text
Size: 1024B - Virtual size: 725B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHAREDAT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ