b700cfd33f1b4f9680b0d3e098832c1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b700cfd33f1b4f9680b0d3e098832c1f
Size

503KB
MD5

b700cfd33f1b4f9680b0d3e098832c1f
SHA1

6b70c1df73760e1bcb8f8ede4f82a785fc82b70d
SHA256

e40268a455bbe690a462823262135cdd0506996924c6d7eeab4c56c488e32ed0
SHA512

4157f3540b35cb1988f0d9c408f4e8f63d42f154400e952a9a7128ba41c4018ce223c259c418df2d7aa49b7626bf4f8eee13f437d87ee49b8444900d1879fb55
SSDEEP

12288:F4alTMzszqqnqsxP85gDMQd63hzBE1wL3oUZJ8xzOcXCuGXX5+stDY/4PeSGBUQY:FzpDzNqsyO1AzBE1wL4UZJ8xzOcXCuGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b700cfd33f1b4f9680b0d3e098832c1f

Files

b700cfd33f1b4f9680b0d3e098832c1f
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

About
IHWCI
MyHook
MyTimerHook
seth

Sections

CODE
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ