13b508cad79c9315e2582977b4c54eca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13b508cad79c9315e2582977b4c54eca
Size

10KB
MD5

13b508cad79c9315e2582977b4c54eca
SHA1

ec37efdf47c9f0bcde9afc63e64240e47d2037ab
SHA256

66d4988e84037654f935231686a2298a85f9ea06a7f798246d2508d334214a09
SHA512

3cfaf94b4181d923c804b47bcdb342bb611ed658405a820141242a1922b7d882e398ab34cebdfb2bcac908826313e47d6e6ee91209770de3c1832930b904f9c9
SSDEEP

192:an35f2vReiqD/6wj69FRXzcSBF/SAsWHi:k35ceig6a69fXnH/OWHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b508cad79c9315e2582977b4c54eca

Files

13b508cad79c9315e2582977b4c54eca
.dll windows:1 windows x86 arch:x86

e26ee8c5b20bc1f8c7426c5f46f27bf1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
ExitThread
GetCommandLineW
GetLastError
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
Sleep
VirtualAlloc

Exports

Exports

rand

Sections

.Proxy
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE