a1eb4bf2507a2eaa0997635e56bd55d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1eb4bf2507a2eaa0997635e56bd55d2
Size

29KB
MD5

a1eb4bf2507a2eaa0997635e56bd55d2
SHA1

9ec191eefab170bc8e5ea3355cb09e6b0c9e5e77
SHA256

2307634d77163e8740178b2a4eb4b5bafc3d2369e6c9f9ef0e32d23c07bdacba
SHA512

b7054cf05a3d9e82c799241672b2aa8793161dd084f2aae6b17726c4845f43c127cb8020633f7e3a270b81e15efbec24fe96f0cdfaf8731ffe403e39f88a085b
SSDEEP

768:tBOOdkqy3VszIbeOREsBG5M1BsV1eKyO0vyYpp8RY:tUxqCVsQJBEM1BsMO0KYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1eb4bf2507a2eaa0997635e56bd55d2

Files

a1eb4bf2507a2eaa0997635e56bd55d2
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ