9b1bd4e2a8b3b71f78cef9ab9a056e16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b1bd4e2a8b3b71f78cef9ab9a056e16
Size

3KB
MD5

9b1bd4e2a8b3b71f78cef9ab9a056e16
SHA1

d5806b1d83f24e8ffa09fc523fdc62ca6423fda9
SHA256

b4281be96eced3b969f33fa52ebd047fa8557375047cc58dd1f53ea3bbc5d52c
SHA512

e7862156617433a07b821212a5ebd8024fbab57c6399beb94746db4b1ba5d693566295c2d0ad3737ff6c18449870ee4cde06bc47a7b52c477b5ce6e8a23dd90e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b1bd4e2a8b3b71f78cef9ab9a056e16

Files

9b1bd4e2a8b3b71f78cef9ab9a056e16
.dll windows:4 windows x86 arch:x86

b259147bdd380dcf63e8f95bbe48f7b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

kernel32

GetWindowsDirectoryA

Exports

Exports

start_

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 225B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ