96f74c76366511359faf7008d7414fab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96f74c76366511359faf7008d7414fab
Size

42KB
MD5

96f74c76366511359faf7008d7414fab
SHA1

e2ac9e09832662ce30f63be3628e7b531f09b2cf
SHA256

d0615d866d95bd0957f402a67a2e4f3d4b9a5b49067125afa36c87860f0f5cfc
SHA512

bdf0e95c3a7967aa35a1a8e7602fdac296375a9d82ced8259d76f69f428a3c433fe2ae4ac4464b22a49d3bc75bbc79d622786ac8fa989559c18cc58e53515088
SSDEEP

768:p6EiPqahHv7kujfB6v4etYerlOPp3875cyjykZ1q0:XiCYTXLy4e+eUPpcyK1q0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f74c76366511359faf7008d7414fab

Files

96f74c76366511359faf7008d7414fab
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook2
StopHook2

Sections

CODE
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ