0011784db9fce835d778f19e0de8152e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0011784db9fce835d778f19e0de8152e.exe
Size

21KB
MD5

0011784db9fce835d778f19e0de8152e
SHA1

d50b2ad3f376219e53aaf6a0567179a2ce5af8c3
SHA256

be637ab5d94665ed7e08c5597f2fd10b1d4ab68530428a5c16a57d152447b984
SHA512

7470a11fbf2eb082f2e9ea3125155adbfc0a3a71502116f119d7e6f061b369bb6c554b205ebee4e2b4a1c491aa5b8deb98bb0d686a729f10daff6155e7d8b843
SSDEEP

384:WPyZNjtU2mvgOnypY0b9lqWeb6AqcM7h3jkS7KZzEid5uz:WyZm6R3qWS6hcskS7sEidE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0011784db9fce835d778f19e0de8152e.exe

Files

0011784db9fce835d778f19e0de8152e.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
Skip3546Wall
UnHookWindow

Sections

CODE
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ