bbc71e83f20aa358df4461a7732063bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbc71e83f20aa358df4461a7732063bf
Size

3KB
MD5

bbc71e83f20aa358df4461a7732063bf
SHA1

d32db42873f04859cdc95d07449b55ab450801d5
SHA256

0c97908fc864e2737c401579f75474376ab8fb8825094f3450164bec2c3300e4
SHA512

08a7ee613ed0af92de2bc2a8e7bef26fc40233155319eace0e83ab30b6a4a52309b67990b24c4d06100b4e191dacfb23023a31333ce2ae929956662ce9895659

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc71e83f20aa358df4461a7732063bf

Files

bbc71e83f20aa358df4461a7732063bf
.dll windows:4 windows x86 arch:x86

e809074c39c3ea9d5d5d83af781af84f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CloseHandle
CreateThread
TerminateProcess

user32

CallNextHookEx
GetWindowTextA
GetAncestor
SetWindowsHookExA

Sections

.text
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MySec
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ