449f5f8869490b56045679b044de56b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

449f5f8869490b56045679b044de56b8
Size

18KB
MD5

449f5f8869490b56045679b044de56b8
SHA1

5f4292a8186b1f1a308103c7c8b2b6c9eabee5ba
SHA256

1b62fffe32e408fab53b0f4c2d9fa0349cec8d3915c3be4b0b25bbf2a204a80f
SHA512

383d1f723a1c9ff8f99aa742d8e78f5f7676785c62979c6052105643457cbd5f823c34c3a17f1a411b3fd25065204287fb40043a61328f0c0f2c65acfa5cab62
SSDEEP

384:tRdCyVMqlWsmQmCWyqBgNIvkXqq6Nwna2LWpaVqPCi:FCyiqlpmQ/Agka66a2LVA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
449f5f8869490b56045679b044de56b8

Files

449f5f8869490b56045679b044de56b8
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

KeyboardHookProc

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ