e10993c6d7cb969967ac7f1079f79eed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e10993c6d7cb969967ac7f1079f79eed
Size

150KB
MD5

e10993c6d7cb969967ac7f1079f79eed
SHA1

4873812cee1bf25e774db9154c3a7198535b1e4f
SHA256

53e1a1814a7158a2d554bba0c1cb2e3930d8e810dfc03c7abf7f11fdde401544
SHA512

1982765dadef8f60bc9d939834c6463ae4440423c9adda496e1c0d0254deb5dc7321de64abe0d7bed324d5d7dd1de1939c93bbd2d3daa1af8b97a7af22a45c49
SSDEEP

3072:RNU7oxhIKy2TzZNwPhwcAtVxtbcgtsi/PqxS5ffm78HeA5zeXCdi:sosKy07wdAjXb5ynw5fW8HefXCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e10993c6d7cb969967ac7f1079f79eed

Files

e10993c6d7cb969967ac7f1079f79eed
.dll windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Exports

Exports

MouseHookProc

Sections

CODE
Size: 140KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packet
Size: 512B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE