7ec9a1fa5bf507a89e1caf2c04565c8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ec9a1fa5bf507a89e1caf2c04565c8d
Size

7KB
MD5

7ec9a1fa5bf507a89e1caf2c04565c8d
SHA1

b0a1ef1753530ad34288c1022e0fe1ea1b998ef1
SHA256

c448514be2738c19b6e0721763d654ff341419170dd1c3aae69f711b44284dec
SHA512

e10b3f9d02eaeff03a097a6b7749f069f5d3adc0da86da08cc0c3d1bc0201693c4758f9dfac7df45e34ce2996574aee8be7b6a7286a338a86cfd866770ece03c
SSDEEP

96:nPI4WiJu8aFwiFtih01RK532eJWahK4oDImBx:ndW0u8/Jh0DK532eJWao4i/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ec9a1fa5bf507a89e1caf2c04565c8d

Files

7ec9a1fa5bf507a89e1caf2c04565c8d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CreateHook
DeleteHook

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 329B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ