7eef6bd7763a018e8720a27a28690999 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7eef6bd7763a018e8720a27a28690999
Size

20KB
MD5

7eef6bd7763a018e8720a27a28690999
SHA1

2d89be8949f1ee743c132e4cb01bd2321afd4ae0
SHA256

a258b34d1dfdb2cb49e9d6310e97a9743c93841c16ba5b17610395d13d17bfea
SHA512

1a227c96231a45d1fb8514dd5dafcce48343eafc4ac0bcdd56e66f273aba186e0339d7184ca0ba334e78a56b7ffbfa0637d262c1ad8507223bdb4d43cf23cb33
SSDEEP

384:aOr5NKZ22UoXVM5GOV6BIwnqBIRjzat8zcgrYYO2:Br5pgVwx6rX9C8cgj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eef6bd7763a018e8720a27a28690999

Files

7eef6bd7763a018e8720a27a28690999
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
SkipFireWall
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ