2646a9061a05a4947033a276c13d38e5 | Triage

Sharing

General

Target

2646a9061a05a4947033a276c13d38e5
Size

118KB
MD5

2646a9061a05a4947033a276c13d38e5
SHA1

c6620ddf9d9951dfd184b3aafb1a5971f80fff16
SHA256

3cc2024704d4ce687c29ebdb307b3bd69ae23087a5cec282eec53a49150272b7
SHA512

ee8d70b4dde347990783f987156389d604b469b54f211e686f34ca5f600ceb441015711d893b943a894fb9f7bc9fb6adf84aaad47ff57774677b122be49a2354
SSDEEP

1536:DCDGL+3qHECyzftwZAxadGgYi9+ftnzFgLZOq:eqmzFTXi8Fnzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2646a9061a05a4947033a276c13d38e5

Files

2646a9061a05a4947033a276c13d38e5
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SetDIPSHook
startNow

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHARD
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ