8dc810a07230e726dd69cad434d7a7a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc810a07230e726dd69cad434d7a7a3
Size

5KB
MD5

8dc810a07230e726dd69cad434d7a7a3
SHA1

c547dfd8eb05ffe35c9952116a415a75f675834b
SHA256

e152f0039f7762bc1533dc12a4c406d00d4c97b0f98553c237b97fc82e92ccf6
SHA512

e0d612573b1ae369ed0fca425aedaf6e4539a3587e6762dae0e5119e853d7bf32f98b6e42e035341d2c0588a66cd5c3b00fa1560340258babdcc941f87884dec
SSDEEP

48:S62UkY4IjDq7+KZgRhs5wsI/LPCVbXi+A1dbiQl2fkCFeFQmJDk435:bmhTOpn+CyWQsp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc810a07230e726dd69cad434d7a7a3

Files

8dc810a07230e726dd69cad434d7a7a3
.dll windows:4 windows x86 arch:x86

645859601a764bad6aff0447750f33d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualProtect
HeapFree
lstrcmpiA
IsBadCodePtr
GetProcAddress
LoadLibraryA
GetModuleFileNameA

user32

CallNextHookEx
wsprintfA

Exports

Exports

t

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ