86eb3432c5f19c64e65cc328773c7ab3 | Triage

Sharing

General

Target

86eb3432c5f19c64e65cc328773c7ab3
Size

4KB
MD5

86eb3432c5f19c64e65cc328773c7ab3
SHA1

1c253fb890b4937892ffffecbd9739fa154014fb
SHA256

20ed42d6cf1fb0b19f1a7ee433c9f9d03a03ebb2ab0519afb310b15948468860
SHA512

cc8a128e2c649674cb390a67a73c9c2dfd7b49ecb961635d63b9cc54befc0710d386207a332d5c002fb8565f4e2f24ada1e24f3fde6a118f8c210edca78ff576

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86eb3432c5f19c64e65cc328773c7ab3

Files

86eb3432c5f19c64e65cc328773c7ab3
.dll windows:1 windows x86 arch:x86

e447b7c905da8cc0ecfd873bdba96cba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetSystemDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
WriteFile
lstrcatA

wsock32

WSAStartup
closesocket
connect
htons
inet_addr
recv
send
socket

Sections

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE