98f3f2f5bc96949aef9b86ffd22d72cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f3f2f5bc96949aef9b86ffd22d72cd
Size

132KB
MD5

98f3f2f5bc96949aef9b86ffd22d72cd
SHA1

c033fb922378a731f5fe287fc3661c07b0fd056f
SHA256

eb09cea4c3c743b254591b73ee636e3fa8b20e1cbf3f0df3d439107f0398c650
SHA512

ea6d1223aa41248666d619e944624bd7a229af145be6af32e39185c98474b88e9948d80d015d289248b5fc287ff0492e08e90429e66ba35155ab9fd88e27ff4b
SSDEEP

3072:K5xb2470L9Vds5akXh73pbmZQvInoTBfe1qSBz:K59x7MwXh7NmPoTBhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f3f2f5bc96949aef9b86ffd22d72cd

Files

98f3f2f5bc96949aef9b86ffd22d72cd
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

SetHook
Unhook
Update
_CBTProc@12

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ