0002967eed4ad45e0344a14dc9801447[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0002967eed4ad45e0344a14dc9801447.exe
Size

23KB
MD5

0002967eed4ad45e0344a14dc9801447
SHA1

21ee254d9d85361284d6e6e1715afe84c4280cf4
SHA256

8741d504f0e11750b4b316b585f2229a9c7bfb368b38588639f27709f734c8a0
SHA512

5969be725bdf1238a3a94b5a7fd67408a7e96ccb1cf81cbe0ea7bba7830f50c1e481424c718d0fcd4b240f0a3634f80e5518966ea03b6af7feb7a2101b9d5360
SSDEEP

384:uSdD9d6GoOi45Lgx2LqRA0hV/YMnQG79j6ORhbxEj8zEZSY9Bph:vGigU/O9jfRhbQ8EZSwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0002967eed4ad45e0344a14dc9801447.exe

Files

0002967eed4ad45e0344a14dc9801447.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ