c0f6d60cf69d7af79ca2b8e4095be5f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0f6d60cf69d7af79ca2b8e4095be5f6
Size

2KB
MD5

c0f6d60cf69d7af79ca2b8e4095be5f6
SHA1

d3c7b5d3e7163221fc6728f043a761d3eadcb7ab
SHA256

c6e0bd746ff7a3109e88b3867679ce7eedff68f5cc24ac6f19c2a3f89c10f438
SHA512

973633a628dfcb4cc3998ce5d3611ccabad52e4b578f92392ff51dec831231c761e15f53a43d97cc068d421637bca27dd9dc3d5b0694586a180498a85922d1ab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0f6d60cf69d7af79ca2b8e4095be5f6

Files

c0f6d60cf69d7af79ca2b8e4095be5f6
.dll windows:4 windows x86 arch:x86

d8842c148d57d3be381543a9fe49f62b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CallNextHookEx
FindWindowA
PostMessageA
RegisterWindowMessageA
SetWindowsHookExA
UnhookWindowsHookEx

Exports

Exports

Install
Uninstall

Sections

.text
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ