46553210a9e201b7005a27dfe97d6381 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46553210a9e201b7005a27dfe97d6381
Size

19KB
MD5

46553210a9e201b7005a27dfe97d6381
SHA1

d76b467f33588db5ca0ff4f577070a6ebd2a00b3
SHA256

ad22dc99990798e3df8923167fdfc1a697215b1f48a846e01a3445680da372f0
SHA512

a3b6e270465f0b4b570975c0e1707b814eda64ea995a64c9f25a430106229bcd50f5a70d0071b9be846adddf45af89ba511efe59fc418c94d4ed1bad2c85fc82
SSDEEP

384:LPyZNjtU2mWwr07rs1Lu/ekVJ6FuTpjVSKqgzEwj36:TyZ//7rJ6FuhxpEwj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46553210a9e201b7005a27dfe97d6381

Files

46553210a9e201b7005a27dfe97d6381
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFireWall
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ