8dc5c7062924489646ce4ce970a7514a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dc5c7062924489646ce4ce970a7514a
Size

3KB
MD5

8dc5c7062924489646ce4ce970a7514a
SHA1

4ba87d124a816e3ef3ebb0ab0744bea51ad282ed
SHA256

8d3ca2c2f9ab7d518bc10316baadeecfa8d7a32d63c21495b85e1c8bd64ad6f1
SHA512

aa42565d71f1835ac0b82a38005e2679c5bae95385db3e6e8a99499313ee1eb1c56ebc4cd5841fb7940e228eb339005c6ca45404cbd3a98295e96e67adc98143

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc5c7062924489646ce4ce970a7514a

Files

8dc5c7062924489646ce4ce970a7514a
.dll windows:4 windows x86 arch:x86

a41b113618c326721ef91b85fbb84b1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError

user32

CallNextHookEx
GetKeyboardState
PostMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx

Exports

Exports

InstallHook
KeyboardProc
UninstallHook

Sections

.text
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 268B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ