563135e8ce78abc5e80c31dc29489a75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

563135e8ce78abc5e80c31dc29489a75
Size

20KB
MD5

563135e8ce78abc5e80c31dc29489a75
SHA1

151b3335fb7d0beb5132b1aca7b4b4e959c52a23
SHA256

f9f83843a77be82486a090d9a3cd8e2eeeb42d366597427e0fc7fdc34c694050
SHA512

d5df15466c4709b33d2b556882780efd61c61c11452a9d8f432dcd723daba21d97a90f7b4eb574590a493cbfe960670935077baf18a9dcec5208715eafb7d77d
SSDEEP

384:TPyZNjtU2m/gxDVDmTi/Rwu8MliBNB6LjIbzEi644ZVu:byZmKRz80izMAEi67Zg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563135e8ce78abc5e80c31dc29489a75

Files

563135e8ce78abc5e80c31dc29489a75
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
a4e5b47ec457

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ