463fc02660215e42c07f059f2b696b30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

463fc02660215e42c07f059f2b696b30
Size

18KB
MD5

463fc02660215e42c07f059f2b696b30
SHA1

e5b3e5530c376c4d77bffd576193a3a02b9678bc
SHA256

32bf64f605716db53c61eefe712f80de885f0b414a348bbbf5a39dffe1313db2
SHA512

1599f8c1396ff8411dd011be658658fb21d7e1442088449b749719d3f1bbae11ad13b122a2a4672f40ed18a5959c7c0f800ca0c6c2b0c79b431700aabd241bf2
SSDEEP

384:uau0NKweUQwkHmgWifXLFbeVU7+jFiNpe5zMn6YYO5cqz:bu0xsWi5bIE+YNIdMnEP2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
463fc02660215e42c07f059f2b696b30

Files

463fc02660215e42c07f059f2b696b30
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fjj4u9fdjklf

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ