50274aa85091c04237f0e3cade40d1f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50274aa85091c04237f0e3cade40d1f1
Size

19KB
MD5

50274aa85091c04237f0e3cade40d1f1
SHA1

b3ca1d1f4a5df7e8490eb6cdfaa84c3fc00e6c74
SHA256

cb804f2ae03d16e0367f594bf5b986b0671e2700bcb3f8981fb6aa794b476076
SHA512

6a24d6beec29b1cf72086f8e8541ebca3e51f98286fc72d0d4e6dedec846be972df6abc84b0e4626c4f4df785246a05efa33b2950ee58bcd3e93a7e47971edbe
SSDEEP

384:cGPyZNjtU2mvInkuJIMzRSTFyuaZjQrzEF2S6BBzBY:cmyZurBM+WQnEF2SuBzBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50274aa85091c04237f0e3cade40d1f1

Files

50274aa85091c04237f0e3cade40d1f1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fs448547aaaa

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ