7b52514853f18b60fd1d8203705975f6 | Triage

Sharing

General

Target

7b52514853f18b60fd1d8203705975f6
Size

392KB
MD5

7b52514853f18b60fd1d8203705975f6
SHA1

de8d8aaf7e47dd95cbf5414fc387d17956e89584
SHA256

b14f40b6fb30469d4fd318b819efa8bc7de3a403944bca6c551b1a3daba44656
SHA512

e3d76d706d7d2d9fb98e4eb4b1d5c94d956217cff0f2fef2b37e78a75c3d6f2b1fbceaad72d2297953129f7b1860b7bcd0dec9805d91423fb188edbbd58e0efe
SSDEEP

12288:1jXpGw0ttg8Ov561cJyvzmIpKaLTCpE3qtQPae6N:1jXpL0s8Ovo1bbvp9LcsqtQPae6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b52514853f18b60fd1d8203705975f6

Files

7b52514853f18b60fd1d8203705975f6
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook

Sections

CODE
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ