3db00e79465dda13420c2795fb6b7f90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3db00e79465dda13420c2795fb6b7f90
Size

2KB
MD5

3db00e79465dda13420c2795fb6b7f90
SHA1

2eb7ac41abe07927870d9ec12a184981880eb31a
SHA256

459d1e3256ee1cbd3d605a151989d9227dee61312350af194c2947c28218d3ad
SHA512

a5bea18836210c87fdd7c870e58abc0c33ff12462c3bb440a31526fe2173f0f3e4804f75312068c47eef10029ec61fd0984f6abaed063599564f8c5ef42b52c7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db00e79465dda13420c2795fb6b7f90

Files

3db00e79465dda13420c2795fb6b7f90
.exe windows:4 windows x86 arch:x86

d9b84ae9958b0ad65d9e9e4f69cb5717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetCommandLineA
Sleep
CreateProcessA
lstrcatA
GetStartupInfoA
SetFileAttributesA
MoveFileA
DeleteFileA

Sections

.text
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 415B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ