8b95e5013e5f1da7b70e51f71c71f99d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b95e5013e5f1da7b70e51f71c71f99d
Size

3KB
MD5

8b95e5013e5f1da7b70e51f71c71f99d
SHA1

3e800c7919d24a84d17c426838247ac8db272778
SHA256

9a4bdd2bda4a910fd18c958e50e78fd2d4a33cdfd1d068743a1ee4586e2b11a4
SHA512

988b770311bc30689287ae9345775614a8760b690570afffb649d03be7fe3f3c1be53a9f8ea7234a14cd6fc639475072ad45fce7325b85756494d11d4161be6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b95e5013e5f1da7b70e51f71c71f99d

Files

8b95e5013e5f1da7b70e51f71c71f99d
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ