98cd4e40e10f1c56696d01c7dfb30ef3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98cd4e40e10f1c56696d01c7dfb30ef3
Size

117KB
MD5

98cd4e40e10f1c56696d01c7dfb30ef3
SHA1

1af67b74943df4bc40a53e7fb434c4cabef1f775
SHA256

5692ed171d0bbb7050a83ade33fcaec68764f3251f6227e41f39f6633f1e054a
SHA512

65678fc2091ed34f81b0eddc79c083a1a68b530c7cb2e1d91d53019e1bf6e029380007b86539869585943c837ec33924a7d62fba953ac1eb792c4e5d07b3d8c8
SSDEEP

1536:5DUTOmVDhHpI61L5NB/gcI8N3134SHN/EHN/gq5JXuGk:iDH3/dz4SHNst/gq5JXfk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98cd4e40e10f1c56696d01c7dfb30ef3

Files

98cd4e40e10f1c56696d01c7dfb30ef3
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SetDIPSHook
startNow

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHARD
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ