236569b4daae0f7081311c016c8145b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

236569b4daae0f7081311c016c8145b9
Size

20KB
MD5

236569b4daae0f7081311c016c8145b9
SHA1

16e659c40cbadf1b9d9c32725f9936d80f6ad75b
SHA256

ec337891aa2884dd127eb3223d7d5ac6ee9ba7feb9ac6e037081a3a67ba27e3a
SHA512

e276f641d877013c1fedd5369370b3e99dc632f3c060f731fbbe7769c1ccd940f865e7ee8e7a71f018456775957189f5adf9355294319a22ee64208bb5b61404
SSDEEP

384:DyVlNjtU2eSBI3gC4U19OlAdfvabsCISpraIjCSTlezElUavF:eVl3PzOlGtzaIZlOElUat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236569b4daae0f7081311c016c8145b9

Files

236569b4daae0f7081311c016c8145b9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjj4u9fdjklf

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ