de1609f9e02b883b526eb5f67f2c6747 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de1609f9e02b883b526eb5f67f2c6747
Size

3KB
MD5

de1609f9e02b883b526eb5f67f2c6747
SHA1

f3de819b0a827e9fee189ce15e3aab0f38e92690
SHA256

e7524bd8a5674cff6e38a240733e973241b6cbcc4b4e8f4e2bd154dfbe68e8df
SHA512

a8d207e2d2ab2f606daad5f47c6ea79fec26161281e8d0f04308111041aa3e3cb568321ed9b1a1a461725597beed11df9cf863eda18c34a343539a353903c168

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1609f9e02b883b526eb5f67f2c6747

Files

de1609f9e02b883b526eb5f67f2c6747
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ