ca67a693b6e9d83a44a3e11d9358f45e | Triage

Sharing

General

Target

ca67a693b6e9d83a44a3e11d9358f45e
Size

33KB
MD5

ca67a693b6e9d83a44a3e11d9358f45e
SHA1

e3f74d874b40c81f6526816f7daaeb943caed65d
SHA256

19201ada5e26ec69b46788f7c0efe54693eff6be431cc16cdbd6401383df0850
SHA512

bb0dc98d4411a06aa321c02d0e872874edf7c5631bd561c3cad0855fc3953b3ec033f2eb1c78344a58dd4d9a35df70884e67acde92c33553e8539e0aa87b9c04
SSDEEP

768:CeHqE1szHLkodKZXi6WgrzBn5kn/e0t8hL2ds5iYu6g5LX:5HqE1sYX/r95k/e7L2ds5iPz5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca67a693b6e9d83a44a3e11d9358f45e

Files

ca67a693b6e9d83a44a3e11d9358f45e
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Hookoff
Hookon

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ