51299903f4fb81ecb7462b01bea0e26f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51299903f4fb81ecb7462b01bea0e26f
Size

33KB
MD5

51299903f4fb81ecb7462b01bea0e26f
SHA1

b9bc53300c10017b7582ba12baf9452f7681e640
SHA256

7cb368b650ad535ffcd7f50b46ef8fa483345e05f27fae5fdf40d8b94e58db1c
SHA512

d89623e71fd82776b1e34ad2b99dba4388efcd823f7b4d2d8771b20634948e4db90ca5f6a9d9a723c9b6cbb8951c302a453a6b70018feb3238fda6526e06bee4
SSDEEP

768:doiEqZOUiQ5JjA/NKBAQK1jeZ/UOPMAW2Zann:dvEqZoQLgqpUOPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51299903f4fb81ecb7462b01bea0e26f

Files

51299903f4fb81ecb7462b01bea0e26f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ