e3d5ba6f87a43cccd6b94435a978db21567d942b22d513afb34c91c56ce89702 | Triage

Sharing

General

Target

e3d5ba6f87a43cccd6b94435a978db21567d942b22d513afb34c91c56ce89702
Size

3KB
MD5

969431de6915e5a2f087bea6e683a729
SHA1

9a8c3c4b45575d0bbbc977b3a56d41d21edc496d
SHA256

e3d5ba6f87a43cccd6b94435a978db21567d942b22d513afb34c91c56ce89702
SHA512

8d50598df0294dc7912fb21395287914e12584a1faef760b1daeeca296308f136afc495f873ad1cc10e4cfa41ef9786087d71e97f205963f39eae4fc3cdc5cc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3d5ba6f87a43cccd6b94435a978db21567d942b22d513afb34c91c56ce89702

Files

e3d5ba6f87a43cccd6b94435a978db21567d942b22d513afb34c91c56ce89702
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ