66ba949f6af7343dad93d9570fd4036d244c2ab152b1d2b7f22bad19df6108e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66ba949f6af7343dad93d9570fd4036d244c2ab152b1d2b7f22bad19df6108e2
Size

3KB
MD5

3ef6f4f7393f8e2bac280f3f410e36f5
SHA1

31ff19224bd764aab95e1a33a78e73a6b0bb44f1
SHA256

66ba949f6af7343dad93d9570fd4036d244c2ab152b1d2b7f22bad19df6108e2
SHA512

082a616356f90bea78e75d68e52e485733a24033ab8e02013015883c42ffe76e0ffe2e8581f0033ffcf1624219fcca7031cf03e37e007a6debc7f6ba54267780

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ba949f6af7343dad93d9570fd4036d244c2ab152b1d2b7f22bad19df6108e2

Files

66ba949f6af7343dad93d9570fd4036d244c2ab152b1d2b7f22bad19df6108e2
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ