0424a3b8be017f1fa0bece0276e60254d4e9b18eed88e3c676226f2089d59523 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0424a3b8be017f1fa0bece0276e60254d4e9b18eed88e3c676226f2089d59523
Size

3KB
MD5

f0ed9650ff8bf49b787ed219f998347d
SHA1

5d9e064b5cde722d48c16d6352a9ddb9b00692c2
SHA256

0424a3b8be017f1fa0bece0276e60254d4e9b18eed88e3c676226f2089d59523
SHA512

5b4cebd3c3c6dcb60e7776e054d17c90a281d7e3157d2d98d134ec62a5385e49583f55352df92f5bb22c2ea703e4ce53d4f82ede8a4acbd3ed2bf923b05366de

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0424a3b8be017f1fa0bece0276e60254d4e9b18eed88e3c676226f2089d59523

Files

0424a3b8be017f1fa0bece0276e60254d4e9b18eed88e3c676226f2089d59523
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ