2cd980d6a49247f0f61783d25db43def | Triage

Sharing

General

Target

2cd980d6a49247f0f61783d25db43def
Size

3KB
MD5

2cd980d6a49247f0f61783d25db43def
SHA1

650b7fb33241fe521045c3943e975b746145f367
SHA256

5b34470552f1dfbffa952fd7119582975c04282638f30ec22a2b9fa87d89e595
SHA512

d9dc40246de8ca8e6e01eb3e1169f93632e41fa23e4f1062800374625a902e5aed47d9aae47b2831b6fe072d1ee5a4dc9294ea6400f65d6cb9f8c4fbf186b7ec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd980d6a49247f0f61783d25db43def

Files

2cd980d6a49247f0f61783d25db43def
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ