51d6b59141c4191f355eac5a10bbef7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51d6b59141c4191f355eac5a10bbef7b
Size

14KB
MD5

51d6b59141c4191f355eac5a10bbef7b
SHA1

022d46f210a16db24f6bc25399db1ba4be23e65c
SHA256

45cd3cbe7ef6562f3af5312b5eaec623fa2be28f0d9cd4ed5f0636446997bd82
SHA512

abfa8e27c4142b137c462133bf81c88e69a92fdced9996205f343b842365f64ba47aeeaf7e4b4bf9d3cc22c813d7e09e4c75cf25631364ed553bcaa879cd6c88
SSDEEP

384:pkIrpzOlWHYIJ8YsP/rl9gLBnO2cu9m0f5N:GEzT4YHy59gLBL9mAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51d6b59141c4191f355eac5a10bbef7b

Files

51d6b59141c4191f355eac5a10bbef7b
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

InstallHook
SetDIPSHook
StartSendMail
UninstallHook

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ