4c9ec61425031a48ccacdb198d71b33d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9ec61425031a48ccacdb198d71b33d
Size

17KB
MD5

4c9ec61425031a48ccacdb198d71b33d
SHA1

02c30a94d271b543bcfc40885e9d5460ad4770cc
SHA256

ca8ba9487040348b9499e2434976d408605979a22e6c55297887d13183cbac10
SHA512

103627c0f8a73347d8a6a9eb96020077031a904b73367eb1998be5d8577a8f1ab37a94b6912405d6413a94c8355cf3e1fd2e3bb6bbec53b9311d9d80fade9f41
SSDEEP

384:t96ztqiT8ARaRjJOM86PS4cggu+Vc0cbjStby/z1C7dYYOF:tkL8TtPS4cgm2ln71+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9ec61425031a48ccacdb198d71b33d

Files

4c9ec61425031a48ccacdb198d71b33d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
afbc2345dfad

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ