f44931a2e47fc65e896e7af2bcea7a97437d46fe181acc6f751dfca7df44b494 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f44931a2e47fc65e896e7af2bcea7a97437d46fe181acc6f751dfca7df44b494
Size

3KB
MD5

c6b20003ac6cd6c82865120c092300d1
SHA1

06bc39b923ee69ba96d96e581d88ed3e7955f5e5
SHA256

f44931a2e47fc65e896e7af2bcea7a97437d46fe181acc6f751dfca7df44b494
SHA512

e9a07790a8739cc3b0629e908797db01b57d67873fe08a47c6204aafc9adb32f46584140d4b7ee50c8aaf9816883e196c8cb6544fb7592d5b64a4b11652a3e59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44931a2e47fc65e896e7af2bcea7a97437d46fe181acc6f751dfca7df44b494

Files

f44931a2e47fc65e896e7af2bcea7a97437d46fe181acc6f751dfca7df44b494
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ