e13e1fba6a39097f430344c912e8318a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e13e1fba6a39097f430344c912e8318a
Size

98KB
MD5

e13e1fba6a39097f430344c912e8318a
SHA1

357d39136ae36b8539af632e4cf043e4e9838077
SHA256

8dc810d3b9cf50efd38ca9cbac5d11622389a1ac1adb4a21c9feb4f884e1e01e
SHA512

fc894dbbb6bac2f778f45922add7a28a3073b3a1abe1dfd4d86a3be8312a6fc52dd0e5e640a11e38882ea9bdc3bd6007384baeeb08c8b0660de5fb4c1e0a3755
SSDEEP

3072:Wc2doIdiNj2LzGqOrdEDNJ/JNfAWTtK5Kbnzm:LWwNjdqCdGhNfVTtKAq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e13e1fba6a39097f430344c912e8318a

Files

e13e1fba6a39097f430344c912e8318a
.dll windows:4 windows x86 arch:x86

431a1dcc9a894e4acd5377ebe894b231

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesW
ExitProcess
ExitThread
GetModuleHandleA
VirtualFree
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA

msvcrt

__p__commode
__set_app_type
fprintf
sscanf
strpbrk
wcscat
__getmainargs

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ