24c56dc4caf00a0cdf23e6472af7a287 | Triage

Sharing

General

Target

24c56dc4caf00a0cdf23e6472af7a287
Size

26KB
MD5

24c56dc4caf00a0cdf23e6472af7a287
SHA1

f8d86c0cf1f638ad6703b41ae0a459acd60c7584
SHA256

bf0ce7afa61968a7c8eb514b3b4f62a7d808c4a7954c5a2f3b4e6bc00e5f6245
SHA512

38fcdae7c715d21df5c9216cd5148d1d001bab355f16ea6567f5fb4521f5e07bda31e8a3474783ab0ffa49a3b257ea38588adf30bd74c84b81d5fa0dbe145f65
SSDEEP

768:QKSYqu2R0GQjMKl/J6lzKt9jIyxmpO69:wYqu2R0GQYqXtF1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c56dc4caf00a0cdf23e6472af7a287

Files

24c56dc4caf00a0cdf23e6472af7a287
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetMsgHookOff
GetMsgHookOn
StartHook
ThreadPro

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ