2912849d3ee9acbc923afa9ac0ff750b18a5ea19ff75fcb693ef64fb3d3b1f39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2912849d3ee9acbc923afa9ac0ff750b18a5ea19ff75fcb693ef64fb3d3b1f39
Size

3KB
MD5

224eb033c4e670e20864d94753b4e99b
SHA1

775f97740829e94cacb7b840b024b813dc43d5b9
SHA256

2912849d3ee9acbc923afa9ac0ff750b18a5ea19ff75fcb693ef64fb3d3b1f39
SHA512

844f4e61c052db6305d1613b8226db01342c805267b690fc7a7be58bb2bca4595e43335d91e0c48422de97bf53f7b3598d589b3032fb2c573ecf3781e7b49c68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2912849d3ee9acbc923afa9ac0ff750b18a5ea19ff75fcb693ef64fb3d3b1f39

Files

2912849d3ee9acbc923afa9ac0ff750b18a5ea19ff75fcb693ef64fb3d3b1f39
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ