022e41f5549f0a7c1bbbfd3714af7e65 | Triage

Sharing

General

Target

022e41f5549f0a7c1bbbfd3714af7e65
Size

3KB
MD5

022e41f5549f0a7c1bbbfd3714af7e65
SHA1

e09cb179b7c0750e762478d32c2fc511e3fb2774
SHA256

26d411a3b95d3bb320c08e9121b23e90cbe679f68f6430296fba77444727dc0d
SHA512

24c5d5d71713ad369fe842739a8789a90ad693d5380c695498f6dc8732d6259e6eb61c968f47e24a90fa50be23e5ff6e5d1fd4266cfae5d56477855cd0d2d509

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
022e41f5549f0a7c1bbbfd3714af7e65

Files

022e41f5549f0a7c1bbbfd3714af7e65
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ