0002c5111bdb3ac56df73653d0086f1f[.]exe | Triage

Sharing

General

Target

0002c5111bdb3ac56df73653d0086f1f.exe
Size

24KB
MD5

0002c5111bdb3ac56df73653d0086f1f
SHA1

0dab150844398e102954f169b4a9ab1057d7d4cd
SHA256

4405e4e8cb09fbe5d0ac94b48ff6b2139d2bf8c968771f42ab67a34f6ec414c2
SHA512

e05773cc4598a34753aad420e035fb76afc721cb18965a5936ce338514253318510ecbbceaecead34aa4039aac13ca5e7b37beeea6ffd4f2b5aaf4f3ae2e16ae
SSDEEP

384:VSdD9d6Go/iARTGI8MU5zboJ3eJjRKL/R+tFDjjFEmqZ+TrxEzEd5LM5qo41:8LanS5MJaRKV+tF/jTXTrxEEd5Lok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0002c5111bdb3ac56df73653d0086f1f.exe

Files

0002c5111bdb3ac56df73653d0086f1f.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFi2eWall
UnHookWindow

Sections

CODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ