5306c45838bdaa5d596f01d05b13e123 | Triage

Sharing

General

Target

5306c45838bdaa5d596f01d05b13e123
Size

2KB
MD5

5306c45838bdaa5d596f01d05b13e123
SHA1

45cf10457da90c07d68b5e96b2ba477d0dc75df2
SHA256

ae4c39d8793d3fe3ad88a8fa2be81d5973c42a4e1fbcb96b881f5a9e0dc15d44
SHA512

28d18fa2ff4a555bf6fb4d7d86b150b3d881399f0d201b7aef51ebe5c6a3cdfcb803cda72690233edee3dbf16cf085aab1404b4b2f6c97a64c5ff6806f2a11db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5306c45838bdaa5d596f01d05b13e123

Files

5306c45838bdaa5d596f01d05b13e123
.dll windows:4 windows x86 arch:x86

6eab6c6a4d326b1996ba683264e16e67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
CreateThread
Sleep
WinExec
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA

advapi32

GetUserNameA

Exports

Exports

win1

Sections

.text
Size: 1024B - Virtual size: 879B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ