13f94e6da3ed40d1f724f2dba7a6a67b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f94e6da3ed40d1f724f2dba7a6a67b
Size

3KB
MD5

13f94e6da3ed40d1f724f2dba7a6a67b
SHA1

c434e838b3729ec713a96167f7490997e2115d81
SHA256

e35ad87e20ec447ca624273ef7b54960408269568af24756dde60b4cfe588110
SHA512

16a3bf2807829d3a40a2f207b63ccbf15c9caf79b2d046c340feefe2fd3945a506cab0e18868950fa4be91b841be95a14b1a14da57dbd746594f61e01e4c19c0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f94e6da3ed40d1f724f2dba7a6a67b

Files

13f94e6da3ed40d1f724f2dba7a6a67b
.exe windows:4 windows x86 arch:x86

de43ea30a3c36d144e60eaf7567bb639

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
WriteFile
LoadLibraryA
GetProcAddress
FreeLibrary
GetStdHandle
CreateFileA
DeviceIoControl
CloseHandle
ExitProcess

user32

wvsprintfA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ