44c6dd2447a44aad9664f3d3cbc591b2 | Triage

Sharing

General

Target

44c6dd2447a44aad9664f3d3cbc591b2
Size

32KB
MD5

44c6dd2447a44aad9664f3d3cbc591b2
SHA1

829f59196445e46afe7485f57dbc7d2ee862db1d
SHA256

20b0243a87dd4cad58d7559ca2252e79628abec1c08b3f298c67f19581539857
SHA512

023cda598e951212756adad87b5ba686e8877125ddb61d1054fb0bff88d03c762886d47fbabc495cdfa7a9822002c667efb1eb25ade8a0fcb80fb3b058569cc7
SSDEEP

768:THeHqE1szLLkodKZvzaT/qd9jmXB5cRhdvrn8ELt2ds5i/VaQ5hn5qNcu:aHqE1sEvV/6sdzRZ2ds5i95hcNcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44c6dd2447a44aad9664f3d3cbc591b2

Files

44c6dd2447a44aad9664f3d3cbc591b2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ