4cceb66ee0e17206b2516bab12189521 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cceb66ee0e17206b2516bab12189521
Size

42KB
MD5

4cceb66ee0e17206b2516bab12189521
SHA1

306f9e0b0305f7f7ff658e1850f89288fcac9777
SHA256

3f64af4849e648a831350e948576dd97acadcf74c30100618ccb337650685f8c
SHA512

14e15066e2d5092d356afb29eef8807f5bdd536235141e7bced4887cddbdeb928434c70dbd956cff242ea67480c1579aed0ceec4f0be1b038e974b023b7db9bd
SSDEEP

768:TCAq8QXGyqVSXi0qeSngzQdbkq+Rchw8WIk43dvFu3mUub4tmmp3:WAq8QWFAX6gWbkYw8WIkUvFt70m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cceb66ee0e17206b2516bab12189521

Files

4cceb66ee0e17206b2516bab12189521
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetMsgHookOff
GetMsgHookOn
ThreadPro

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ