b8ed8f6d2f5e566be18296a8bdb16629 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8ed8f6d2f5e566be18296a8bdb16629
Size

3KB
MD5

b8ed8f6d2f5e566be18296a8bdb16629
SHA1

e386d2ee159b3851bc3ea7791e433669d07615c7
SHA256

12b436c60c7dd0d7fa19785afb36b675876c709db8bb8897f5c38a82c7a041d4
SHA512

5783e83455c5159d4519b40ad97e52cc8f279a5e36d1ffebb571e2c2efdabc78f0556cb97cf45297ed1be19cab7eb45e527a5e161eae8a9dafba77b815ae3092

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8ed8f6d2f5e566be18296a8bdb16629

Files

b8ed8f6d2f5e566be18296a8bdb16629
.dll windows:4 windows x86 arch:x86

805d77ebf6e2842ae8cc8d2cbb1f6dc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLastError
FindClose

Exports

Exports

Execute
GetModInfo
Install
Run

Sections

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE