c6498ced97fd5f2a9647a7ab7eea68fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6498ced97fd5f2a9647a7ab7eea68fa
Size

2KB
MD5

c6498ced97fd5f2a9647a7ab7eea68fa
SHA1

668aa4c1075e3f9986584c004dc9a9f29a2a03d1
SHA256

8f4fcc992d883f95ddab06525aea684e54d41fead5d00becc1cf51523d3638e9
SHA512

f34fffb555f26a7c5711ded8592a2d3aca4ad30237d6156cd79a4389defd0f7e069656d1870928ae0ecd407d16e5dd70c33f565d06d7a0ac030f2ed8c0f52b78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6498ced97fd5f2a9647a7ab7eea68fa

Files

c6498ced97fd5f2a9647a7ab7eea68fa
.dll windows:4 windows x86 arch:x86

6eab6c6a4d326b1996ba683264e16e67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
CreateThread
Sleep
WinExec
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA

advapi32

GetUserNameA

Exports

Exports

win1

Sections

.text
Size: 1024B - Virtual size: 879B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ