7228bca75225a1dec9b5730af9cd5bd9 | Triage

Sharing

General

Target

7228bca75225a1dec9b5730af9cd5bd9
Size

21KB
MD5

7228bca75225a1dec9b5730af9cd5bd9
SHA1

3aabbc2131bd38c0e14f54425666de89ffd0d436
SHA256

1c8bab8412671a89e86e84fc73e6632a7c52bfc9c909122d4268519b242e9ade
SHA512

b0f221ea3a42b7063e610e6fb1449bfa7d3ecf0d6a435fb626007bf7eddca02f551815eafc18c19005855ef3abcd6e9593b9bc4091dbb5490a754e55d748f3a0
SSDEEP

384:VFPyZNjtU2mLQp8H5OsIjCFsdCp2jjwAzxn0lI9:V9yZyRYs5GscjwAxn0l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7228bca75225a1dec9b5730af9cd5bd9

Files

7228bca75225a1dec9b5730af9cd5bd9
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
fs448547aaaa

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ