46c4667f6a1d870aad60df1b19a2d1d2 | Triage

Sharing

General

Target

46c4667f6a1d870aad60df1b19a2d1d2
Size

13KB
MD5

46c4667f6a1d870aad60df1b19a2d1d2
SHA1

042fac25a6f5aa86f4722184755bc1063c70c4d0
SHA256

fe8a378171f6339efe50b119a30bfa8cfaa88ac8b638c782dfeb989a6f36f8ba
SHA512

18ceda50815f2c561aacb4b148c7ef8bdb55a3d10d80efb186509b1bfd113bb7de6b89b585c0fe84fb9f03ef0da204d7fc642b86003d781b252132b773d91476
SSDEEP

96:nPI4WiJu8aFwiFtih01Rl532eJWahK4oDImBxDdsawHr4+5:ndW0u8/Jh0Dl532eJWao4i/5MHp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c4667f6a1d870aad60df1b19a2d1d2

Files

46c4667f6a1d870aad60df1b19a2d1d2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateHook
DeleteHook

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 329B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ