0505d8e072dc78f330ddfcef08cdecb89490931abf3e931f04a699fa3385aafc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0505d8e072dc78f330ddfcef08cdecb89490931abf3e931f04a699fa3385aafc
Size

40KB
MD5

feaafb6aded289b6b639515f063bef70
SHA1

59b996670d909e64d933d81613f27b96d9584f61
SHA256

0505d8e072dc78f330ddfcef08cdecb89490931abf3e931f04a699fa3385aafc
SHA512

31de15d8d8d1755bd1fac671960a1b734cd9ffa8f53fa134bc1c6a2b3f5cc3eafdcc3e69991e12b657e5431df1a7e0b7d37cf9748647416b8f5aa1e06fedd7db
SSDEEP

768:N+VvWiu0xLxtYHSG4S+3dVCtQOqFJFMfToW580mq6MLGGU:Nc9uGxtYaS+3bxhJSfToWi0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0505d8e072dc78f330ddfcef08cdecb89490931abf3e931f04a699fa3385aafc

Files

0505d8e072dc78f330ddfcef08cdecb89490931abf3e931f04a699fa3385aafc
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook
pt_ksHook
pt_tzHook

Sections

CODE
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ