05f41442e7ba0adf5f4262e6f446dfa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05f41442e7ba0adf5f4262e6f446dfa7
Size

2KB
MD5

05f41442e7ba0adf5f4262e6f446dfa7
SHA1

a0ade179cc82100152d9abe32e466c6a996d484e
SHA256

83c38c2ccb118ede720efcf55863d819f9d51279d8755285177d5cc16e366a7d
SHA512

e030c7563a5c7fa6f021af8e560dd741b34b4a9cffca49834df8f335def0f16cfefa073e4357007519fe91714b98641bb71ffd5a9aa4574cc7281ac30da9db35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f41442e7ba0adf5f4262e6f446dfa7

Files

05f41442e7ba0adf5f4262e6f446dfa7
.dll windows:4 windows x86 arch:x86

93d5875353531230f77859392f5d10fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
CreateThread
Sleep
WinExec
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
GetVersionExA
GetSystemDirectoryA

advapi32

GetUserNameA

Exports

Exports

win1

Sections

.text
Size: 1024B - Virtual size: 975B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ