3c1b861fab59c4f2f00bfe9fecad2229 | Triage

Sharing

General

Target

3c1b861fab59c4f2f00bfe9fecad2229
Size

20KB
MD5

3c1b861fab59c4f2f00bfe9fecad2229
SHA1

3831112441e66a79aaf443fec3467ca070ed253c
SHA256

348005ef2545e0a5c6874e74ff71cb00853a3bfb84db367a3eae36c2f73c8920
SHA512

c0b02f98db37ddde5ac99564d862f715cc5a1dd4bf43e074006bd3a51f7cc92d3010d8800699524ce50001baae475a3d4b6d4fc26e75b4576ac67694737a61af
SSDEEP

384:MPyZNjtU2mycgUcUb9rM8Bm05eLkvqG8IjCfz6mDLutB8Ig:8yZ284pBmOjA6mnoBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1b861fab59c4f2f00bfe9fecad2229

Files

3c1b861fab59c4f2f00bfe9fecad2229
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ