e1302097ad33540cf9093d1aa39e8189 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1302097ad33540cf9093d1aa39e8189
Size

3KB
MD5

e1302097ad33540cf9093d1aa39e8189
SHA1

6f870f0d4a95d7c1a1bda883339b4cec25cd5e09
SHA256

33e668f5d6b5f7456d69160602b1aee453ca2a672b3eaa47f33305eb22ffb39e
SHA512

1e63ddf9861ecf56ce6173fa4825660b8db9f4df658a46726a797e81b9db9631a80849aaac9019ab5c617b0ed87fe9485f73986f3e6563aa4f7f60c32bf77ab9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1302097ad33540cf9093d1aa39e8189

Files

e1302097ad33540cf9093d1aa39e8189
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ