bec22168a2ad5c9ed0e83476fc6ef59a | Triage

Sharing

General

Target

bec22168a2ad5c9ed0e83476fc6ef59a
Size

126KB
MD5

bec22168a2ad5c9ed0e83476fc6ef59a
SHA1

7905a70392af0fd9d73e42f592367cd42f52839a
SHA256

c4b481e427d46283c147de3816a1b5df6e9b1d7d586a38c01e9e365a9ff58072
SHA512

c05c3d45c76048a8dd1729f89d5ca59c2e6c3cfbb0223da4caa919eb306593bb45097d2bf01379d249d6e7f7c22d285c1966a192eaf04d2b1c8944f9942b0e2d
SSDEEP

3072:K6T+1r43p/oyukeTcxG1rAYjkPD5RcdqqGPkUjCu0ClxW9:QaApTcxsUedqkUjCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bec22168a2ad5c9ed0e83476fc6ef59a

Files

bec22168a2ad5c9ed0e83476fc6ef59a
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HookOff
HookOn

Sections

CODE
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 87B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ