57d9444efd53200d65340cabe3185744 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57d9444efd53200d65340cabe3185744
Size

3KB
MD5

57d9444efd53200d65340cabe3185744
SHA1

677134e8be250f070d8130636f35f24591bd9fd9
SHA256

4e2835642a6aa1e33f6644cf7ca17eddf30fa22c031dc7409b4897b33bc5f1c0
SHA512

cc03d6eda8789c26739430d5f8b2742a94eb5dac4c2034ac4c4dc6453c9fbf9c93e75e195b2cb36c3702d553aacd1b5c34e904e45318918cc2d211f661c725d8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57d9444efd53200d65340cabe3185744

Files

57d9444efd53200d65340cabe3185744
.dll windows:4 windows x86 arch:x86

e809074c39c3ea9d5d5d83af781af84f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CloseHandle
CreateThread
TerminateProcess

user32

CallNextHookEx
GetWindowTextA
GetAncestor
SetWindowsHookExA

Sections

.text
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MySec
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ