b4cbb1000749019e924a98e971316788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4cbb1000749019e924a98e971316788
Size

11KB
MD5

b4cbb1000749019e924a98e971316788
SHA1

75de682ec217e3e667eb1afa608415a65483816a
SHA256

042cd9fdb7fe5be8e8cb78c6a64ab7cacf01910037a4a4723a66e585289a0c21
SHA512

e906e57d5ee82db0435b50393d4ed98e11d705e0812e4be9373583da31b6ddc1bfaa193c06cca134c228479c5e1027b29b1272aedf52a781d987c165bbf11585
SSDEEP

192:+x/dFnSURjSH/4eQ3WWbubIfVqm/V43YnhJPvWrwN8:w/bnSURGH/4eizbubINX94ohd0C8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4cbb1000749019e924a98e971316788

Files

b4cbb1000749019e924a98e971316788
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetLevelAndItem
SetDIPSHook
SetMIRSHook

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARDAT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ