13625def6f0ccfb42b875eab1419634d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13625def6f0ccfb42b875eab1419634d
Size

3KB
MD5

13625def6f0ccfb42b875eab1419634d
SHA1

26171336408a6f06b11bd316e54571caa55de609
SHA256

6b7a45a6cfeb1773abeadd68c2065fdb0e5f3ee94c7ec8f541102201910fe715
SHA512

6ebefe500ae8a41f1ec040480fee2e14083feced66acd20c2f47c70136bba59ad198a23e0616dd053ca6f58d478b0aee907df57299fb7fbcf412648c26ae5a60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13625def6f0ccfb42b875eab1419634d

Files

13625def6f0ccfb42b875eab1419634d
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ