9a239021d5da50fcbf630558d469ee10 | Triage

Sharing

General

Target

9a239021d5da50fcbf630558d469ee10
Size

524KB
MD5

9a239021d5da50fcbf630558d469ee10
SHA1

114926ce30bd328c90459d103e986779522c452d
SHA256

f72babc60cb873d7a043697b40627f132b0bfbfd2693ccd8ecba874f55f0f02d
SHA512

99f1fc9b5502aef9fe3ddcc6b86029f3c3fef8b51e04f0deea8735a92d9fcfc10b2ea52c926532da2f5f7cfd24dcef723b82c4e048ccbc9b0cc120da5a2fcfe6
SSDEEP

384:VHqVNjtU2+kxPzCh3h+G/d0bXH+YTBeQSGX5JKhzgVKk0KmX:VKVjRqPd0qYk34kgVKkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a239021d5da50fcbf630558d469ee10

Files

9a239021d5da50fcbf630558d469ee10
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnBHookBWindow
ge4gdcfsd1
ge4gdcfsd2
ge4gdcfsd3
ge4gdcfsd4
ge4gdcfsd5

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ