easy_Malicious_00903203890446ba80fce1c5dda253905764c5d322f56497bab2905d34f44ad7[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Malicious_00903203890446ba80fce1c5dda253905764c5d322f56497bab2905d34f44ad7.dll
Size

3KB
MD5

8994eec66eb002d36d4afdb79dc41482
SHA1

5d4103cd44cefde4eebbf8d780cd93624fd46104
SHA256

361f4b1b34e07bdd07c2e287fd197b6e080504ba8ed1bd8f4718c160d872b5c9
SHA512

58f656e76c92b1c27ec4bdd70dbc7ef3c12578870ad8e1b86d4442a35a7d7801a53ba57c99041090946c9635adbff0707536c2eb1c0de5ac658ab31f4b62758c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Malicious_00903203890446ba80fce1c5dda253905764c5d322f56497bab2905d34f44ad7.dll

Files

easy_Malicious_00903203890446ba80fce1c5dda253905764c5d322f56497bab2905d34f44ad7.dll
.dll windows x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ