c13f7e71f96975a9c437451dc85f8d3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13f7e71f96975a9c437451dc85f8d3b
Size

3KB
MD5

c13f7e71f96975a9c437451dc85f8d3b
SHA1

65b47cd1cfc326a1c072b6c7442d1e9e9c07e14e
SHA256

034ed6a7c31bc30000753caf836d99ae073c936a27fa3438f81c07fe2faaf1a0
SHA512

59179dce3561361d7a28818e456c38fc55fcb8494ac5a400a8570546a948c2d0a6ea92ab25f2861fa3443b134b495c114c21519f243d27631deb78c337904e68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13f7e71f96975a9c437451dc85f8d3b

Files

c13f7e71f96975a9c437451dc85f8d3b
.dll windows:4 windows x86 arch:x86

a6ccc15e2b8ce6c20206238f9d7424f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetTempPathA
WinExec
WriteFile
lstrcatA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ