477790363de32b5a0e88aa1e2e685c83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

477790363de32b5a0e88aa1e2e685c83
Size

3KB
MD5

477790363de32b5a0e88aa1e2e685c83
SHA1

1d28331bf718971e597b85185134931e7ef41fbd
SHA256

3a60cd9072c0e70b6294fbcc9d37c92bde6d63f6c627cda35cb0076cef8df1af
SHA512

c60b23d6caad6aeeeceaa1cdef664a476e7775c624c53d966e0980fe46d65c2fa31fa291f0624f732effefce67d249a65d66a67cd5043be9aa4954ec214ce41d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
477790363de32b5a0e88aa1e2e685c83

Files

477790363de32b5a0e88aa1e2e685c83
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ