386aafb9c7b3346df40454743f4a1682 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386aafb9c7b3346df40454743f4a1682
Size

3KB
MD5

386aafb9c7b3346df40454743f4a1682
SHA1

3556354e459372eff1a5a803909990bc2115c4c6
SHA256

e48f524038ae5a9cd3118ff79dc177d3da2cbdd845f5c922d2ce154f4202494d
SHA512

74f024333845d2f50199aba1d643ab6d95b81e4b6122ecd3867875cbf0bf538eaf1ccda30ad4f2a0054fa7f365813e305fdf190731393660cf1d6114d3ed9f36

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386aafb9c7b3346df40454743f4a1682

Files

386aafb9c7b3346df40454743f4a1682
.dll windows:4 windows x86 arch:x86

e801e570f38130d7081fff1d12056808

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetComputerNameA
GetVersionExA
LoadLibraryA
ReadFile
VirtualAlloc
CloseHandle

Sections

.text
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ