fb493ff2fb248811385f436fedf38edb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb493ff2fb248811385f436fedf38edb
Size

3KB
MD5

fb493ff2fb248811385f436fedf38edb
SHA1

d1a26514a895291309d5491ca09cf102e675237a
SHA256

6e3ae5f623a762b366534d7383c73445559b4a00ffd44ee286182d132f3d9094
SHA512

3835cc3aa9d5bad358b248b6b8db9f594847f782e65d19cec675feee720460250f6882d19f627a1db9dbbf1d95a2d1c071e56cd8c6101e20d758e1d96909ed37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb493ff2fb248811385f436fedf38edb

Files

fb493ff2fb248811385f436fedf38edb
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ