bde15082a4f636c5178d5c1c774b13b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bde15082a4f636c5178d5c1c774b13b3
Size

26KB
MD5

bde15082a4f636c5178d5c1c774b13b3
SHA1

cd8f2133518e70d34ea5a3d31db27dfcdafaa28c
SHA256

cd0087610960ff1262bcafb773286a47b5cd4770971ef01d6a467d947052a24a
SHA512

0e7a4c76940f9d497abe83167f4e954d3ae7bc27aba0c297bdabe75fd8979e405dbe5029f13c5db6b52e27290b7b3212a503f904d1cb85e5064d0b5d1f28c3f2
SSDEEP

192:za4N5GSUopcjUIQLTmy4RxYjBIECFwXLsHwKdukZyDHHhlffteQFS:zaTSxpkQLT7aGVqFWLsHZ9ZWhlXnFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bde15082a4f636c5178d5c1c774b13b3

Files

bde15082a4f636c5178d5c1c774b13b3
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetCurrentKeyboardCount
_InstallFilter@8
_JournalProc@12
_RemoveFilter@0

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Oreloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.neolit
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ