ab886b6fbf7b0b270b965b8dba1cff97 | Triage

Sharing

General

Target

ab886b6fbf7b0b270b965b8dba1cff97
Size

4KB
MD5

ab886b6fbf7b0b270b965b8dba1cff97
SHA1

48951243947c621fcd50ce799980ca8f75d128b5
SHA256

ac831e0cac343382442e5205e2029a23376090704d76f8f99c545a1c1d64eb5a
SHA512

9e4214e0b09c4facfe82792eefc1099754a92d9ea0adfec6e6478d4cb6997c0e8dcd2d244c1683267cda541b0225cf3ffd4113a886f3e90057fb6599c919bd2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab886b6fbf7b0b270b965b8dba1cff97

Files

ab886b6fbf7b0b270b965b8dba1cff97
.dll windows:4 windows x86 arch:x86

c912eca9efe6d86fac1ee065203e6f7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrcpyA

Exports

Exports

ModifyFile
ShellProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE