bdc9553696a940e440bd1cf4a5a3b690 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc9553696a940e440bd1cf4a5a3b690
Size

35KB
MD5

bdc9553696a940e440bd1cf4a5a3b690
SHA1

c905f63861348a12e1c9c4dc6523ddaccc7da50e
SHA256

256f05435338f1da2715fe6fe2d6518cc896e42832d846a93f1e08d90e78db5b
SHA512

6a611849e66bed4f99f1fae25432a9a44fc116c638bffa7177b99d8223595472ef756cef9b009b154eae331b47e1201c4b9fe952b750bb85a3c604f3295b1630
SSDEEP

768:6LetqY1szH8Jz720Lgj2AP/iG3zGViU/MjmQ:6StqY1sbT0L3H1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc9553696a940e440bd1cf4a5a3b690

Files

bdc9553696a940e440bd1cf4a5a3b690
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

.MaskPE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ