3a014942cd8150b391a115100cb53f24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a014942cd8150b391a115100cb53f24
Size

25KB
MD5

3a014942cd8150b391a115100cb53f24
SHA1

49c4318eb42808295ebce7f6c50667d21c7dab7a
SHA256

26f2cf86045492cdcd9b8f4fe3f6d63b4dff5d8aa0f6c37a137e632077bf551a
SHA512

70e77777228220a02c7de29502d187b2d3981cd3f5b56abef8d317b1b7fd5b4fd4bca3160bd157818c38561c09aafa866ee5fafd90dda740fee95eb594bcc0f6
SSDEEP

768:bCRiqdSEQZTLtp66N1aESPcAjKHc2kcy:eYqYEQ1/66rojKHc0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a014942cd8150b391a115100cb53f24

Files

3a014942cd8150b391a115100cb53f24
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn
StartHook

Sections

CODE
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ