c838621512d8b2b25d05dc7194d1d989 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c838621512d8b2b25d05dc7194d1d989
Size

20KB
MD5

c838621512d8b2b25d05dc7194d1d989
SHA1

5add6d588027d5c8ddbcbcb12b9e335243a772b8
SHA256

fda9b97455249e929a5fa150b06a3b6e510aee37d752509a3aba2ed43d110e1d
SHA512

5ed529e16584aae83d21cb44e5b0492f7ce553150ba7b9940a9846a9e3922c5d0bab5610f70e91f0278142c083bddc82d3092bebc719cede5f9f7c98c1aafb15
SSDEEP

384:2au0NKw+57yydfZYFBjpkOO5hq31t5jOH5zwtJYYOG/hT:ju0urx+FBjpk1MxGwttl/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c838621512d8b2b25d05dc7194d1d989

Files

c838621512d8b2b25d05dc7194d1d989
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnHookWindow
UnHookWindow

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ