c9b9d84eead4649b69fe2b3bd50ddf5f | Triage

Sharing

General

Target

c9b9d84eead4649b69fe2b3bd50ddf5f
Size

3KB
MD5

c9b9d84eead4649b69fe2b3bd50ddf5f
SHA1

b47a3b02aab2feae77df4ae1781ce778b86dd01f
SHA256

55cbe272ab02bf5ea304715b63e70570e6f3a1d301cc44bd1fcb1be3008e98bf
SHA512

107c07dac0192d2e7278e5f034e49bffa5ec0cc249c7cc6c95ffdff97d0544477148704fc6539d50e6150daf7a4c9bc9c403e47579522154566147f78cc5dc92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b9d84eead4649b69fe2b3bd50ddf5f

Files

c9b9d84eead4649b69fe2b3bd50ddf5f
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ