c5ef18e6c25e75730a8bea556b799824 | Triage

Sharing

General

Target

c5ef18e6c25e75730a8bea556b799824
Size

22KB
MD5

c5ef18e6c25e75730a8bea556b799824
SHA1

8b40f15ad795d585e6887a57e5bb71f4a4ccdbbc
SHA256

c288057ae74ef6ca6c6ab2e3d9238503f45768f9b0d65582a37a0ac434af49e5
SHA512

c865851327888f33efb362acecff84a097d70169e6536f0bd248060fb837e33d47fda3709b85fd79797566ca4fd9e134323553da193c8cb6775f6d10eb302254
SSDEEP

384:5YyqlLS8tPoD7q+90NxxrM83QVJjjGjbWN+Et72XudHAa64ABQpir3:KVsYxxgmQVNFt364m3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5ef18e6c25e75730a8bea556b799824

Files

c5ef18e6c25e75730a8bea556b799824
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

StartHook
StopHook
pt_ksHook
pt_tzHook

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ