248a4e971b91de5078dc7ed9d52eba27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

248a4e971b91de5078dc7ed9d52eba27
Size

23KB
MD5

248a4e971b91de5078dc7ed9d52eba27
SHA1

c409775c71265da9810ab7b33f08bea221fa563e
SHA256

00bd42bf87b4e0e8adc44b27f7ab4d52a75c931f28b7cad79c6f74ba652b1721
SHA512

c9a4c12f7bd1c939f1b0c823775e96abe416e708078a817c3b77316e5ce887e62113a1acdab976a962dca8db0b1983f958a0d0ba49897c8d057462f6cf365121
SSDEEP

384:ay0yqFnL6e8RMxUjZaYaPqDgjaj2J2o6hDjrKCxvvkBXeyvIrq9YAa62ApxVJD1P:ab00FJajQ25umMBX3Qrq9c62031lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248a4e971b91de5078dc7ed9d52eba27

Files

248a4e971b91de5078dc7ed9d52eba27
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook2
StopHook2

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ