EnAHookAWindow
Static task
static1
Behavioral task
behavioral1
Sample
41264ff93acb9a09aafc0c193b60ac2e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41264ff93acb9a09aafc0c193b60ac2e.dll
Resource
win10v2004-20231215-en
General
-
Target
41264ff93acb9a09aafc0c193b60ac2e
-
Size
102KB
-
MD5
41264ff93acb9a09aafc0c193b60ac2e
-
SHA1
51d84a1ecf81cb584de8fae9dbba5263bba3ddc2
-
SHA256
250a174fd7398a7148088e5b21f1ccbf0d18eeec53df9143d86d5d92e71d67b5
-
SHA512
7703f39fe31f1ce0bf405c083f7a16243c82d54fdc695401513fdb336a6ff9ddb3f3ebc5c6c50e18691447ff95da7845b0339db59461a623e45118890a2c00c1
-
SSDEEP
384:8yVlNjtU2eMxJv3doBAFa0vHt66gJGjNtPXyvFC4j8NMTJ8q8ctzQS11TkQel:hVlhv3tFau61wjNtEFCfuJ8B491Tk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41264ff93acb9a09aafc0c193b60ac2e
Files
-
41264ff93acb9a09aafc0c193b60ac2e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ