b863e259a0d0265b16f1f0775f822827 | Triage

Sharing

General

Target

b863e259a0d0265b16f1f0775f822827
Size

20KB
MD5

b863e259a0d0265b16f1f0775f822827
SHA1

4e119844e85a7db56f2251e02272aaef232409b7
SHA256

1ddaf9b5264e918c6118f47031f99b7332cb8525ca01d161a8bdfb93f54246c1
SHA512

6f09351223975ef583e96dd15251490e66e6eb614230d04b84d579e763947a0d6a76336a06728731938c029f5e28f7ce5b955a57425afa4257e5a1323b6af136
SSDEEP

384:JyVlNjtU2eKlIgcCdgt1Yj8Jk0+Y6MNpgo66n6SzEZmzU:cVljYVYQLgo36SEZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b863e259a0d0265b16f1f0775f822827

Files

b863e259a0d0265b16f1f0775f822827
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
aaaabbbbcccc

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ