426b809d9fec973b19c294daade50889 | Triage

Sharing

General

Target

426b809d9fec973b19c294daade50889
Size

3KB
MD5

426b809d9fec973b19c294daade50889
SHA1

730568e107c5e5438bd3bb2bca8a3ef76be93bcf
SHA256

19ceba999b226ed63189d7158fe2a2e5e151e73d032cd919bed1ad17822f0923
SHA512

22382f6b8c2cb5e4b60c0f06daebc6cc4f3abffd36148a667b73583c0ef5010dad73d491c8abf8a1a04d43ee5d3169f219200b57c0201af4edfc6f5c9627d448

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426b809d9fec973b19c294daade50889

Files

426b809d9fec973b19c294daade50889
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ