8ab8a007bad20e0d0cec28f1c8665bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ab8a007bad20e0d0cec28f1c8665bf6
Size

3KB
MD5

8ab8a007bad20e0d0cec28f1c8665bf6
SHA1

abdf212303d4936ff0ad0c0ef6f57d5214e5c0a8
SHA256

9dc077113bb30a2991424f3d867a414a6f3299cadb817af976b7e9f8d5023bc9
SHA512

52216ac36d648c5d15f17ecb80a9eb810ef329a3deb1f008cfed3335f8891353f398716f07a1ff2725ee65699a88b4e5ddc4f6d164f6cc5b383b9e7113d57698

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ab8a007bad20e0d0cec28f1c8665bf6

Files

8ab8a007bad20e0d0cec28f1c8665bf6
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ