c3f4801f91acb08c59cbebd9a379e490 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3f4801f91acb08c59cbebd9a379e490
Size

17KB
MD5

c3f4801f91acb08c59cbebd9a379e490
SHA1

a7c161ad890e60713bed0cee677dfa14e15ff302
SHA256

4da79f762efd9a8bbc4318259e1d7a7432357a3bcbaaf4eccb859215358dbbda
SHA512

8df026cf93c00a35277b1595fd05a5d01a11b0b9d2b2b9cf1ff8f904575e291884de7c8b7d783119b82eeb4599f19e3ff08ae0eacecec5d196af9bdc44b665e9
SSDEEP

384:Q96ztquHxwFtP9+2agGX6SyxS+tjxi0NvJb18Bwz1KRYYOHJ:QkDqrHjIH0ZFv1K1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3f4801f91acb08c59cbebd9a379e490

Files

c3f4801f91acb08c59cbebd9a379e490
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow
f45678912000

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ