cca1a59b97e00a72f6aaf6c0d581870f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cca1a59b97e00a72f6aaf6c0d581870f
Size

4KB
MD5

cca1a59b97e00a72f6aaf6c0d581870f
SHA1

4a8ea084841919fa1d1384dd686c52e7df2e9cd0
SHA256

925174414f0e65d4920e3eab09c8e9d7c9a7f24bd3f3b2d687cd1c7f2a54e264
SHA512

91de3c18f84a3e9f90d23bac3bf4b16fdb3232e20030ef4624769a812f449090a7619b0013e3ebbeeb8c95b3ac2dfaf2be9a426fd9a60e97b8906a0aa6700048
SSDEEP

24:etGS6pE9wQm7tSxeppwLSX/uELNfAUN4yBJYyZt+TROJd2GxXTAE57/0V:66pMM4eUOmO9BWyL0OJd2GxXTD7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cca1a59b97e00a72f6aaf6c0d581870f

Files

cca1a59b97e00a72f6aaf6c0d581870f
.dll windows:4 windows x86 arch:x86

851686e6498c055327aea8f4cb37faa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetKeyboardState
GetWindowTextA
MessageBoxA
GetForegroundWindow
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx
CallNextHookEx
PostMessageA

kernel32

GetLastError
Sleep

Exports

Exports

InstallHook
KeyboardProc
MouseProc
UninstallHook

Sections

.text
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ