ab767000f814a544d6420d23d61880db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab767000f814a544d6420d23d61880db
Size

26KB
MD5

ab767000f814a544d6420d23d61880db
SHA1

ec90d6d8edfdcdf1fe9e037a213cdab9fe2f3e6a
SHA256

242429e69612848159a088899eec6eec6c574de69bc7e4b9eefcf01f8a5c341c
SHA512

3100853d094f864937cc201d14e93906761e4c7fe879fc6a2b1446a01e5ea75c26dcced227f85e07b7e0018852a1eff070eede5d7740fbf5ce8962b968c05b22
SSDEEP

384:uAHxUSoqujqPKnGQuvKzsbRtko13HHlbcYXE/1B4j7p2Wyry22t0KkAzA5OO:LKSoqueP0GQZzottnlbNXx2bQxZA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab767000f814a544d6420d23d61880db

Files

ab767000f814a544d6420d23d61880db
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn
StartHook

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ