d6ca3448bf13a90fde3b8f5e7d328160 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6ca3448bf13a90fde3b8f5e7d328160
Size

2KB
MD5

d6ca3448bf13a90fde3b8f5e7d328160
SHA1

373c4b79d2249ba1e64a4568ca94bee0a9759c54
SHA256

caa5a9c7b0dcc9d16d2a406d5ef872a78271385e2311b068787d17349f39b382
SHA512

10d033e89f6280ff5abbea5a906acc697acf0ef6a94022a69aa93bbb3fb71a32429ba55e3f13955fbb204d846db9249484e44dd4b4117bd19e69bdee7609c0c7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6ca3448bf13a90fde3b8f5e7d328160

Files

d6ca3448bf13a90fde3b8f5e7d328160
.exe windows:4 windows x86 arch:x86

f7b760deed9964a97908f9dea087b136

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\FrameWork\win98loader\Release\win98loader.pdb

Imports

kernel32

Sleep
FreeLibrary
GetCurrentProcessId
GetProcAddress
LoadLibraryA
CloseHandle
GetLastError
CreateMutexA

Sections

.text
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE