b8d81bda1938bda987a88f89c7a9e4a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d81bda1938bda987a88f89c7a9e4a2
Size

3KB
MD5

b8d81bda1938bda987a88f89c7a9e4a2
SHA1

03fabe5e45a432dc8326673855f07c9e5d881315
SHA256

860dbc9cffeac617acbdb7f695b0d6a9cf8107a5dbfa6ff17d9bdb3a470c02e8
SHA512

904bcdc2243f1743f78212edc617784e728d2fe1df72e44881bf75af620b27d761005f09821a69b35df2d5b4c769708ed6c2c4ea87e001e175907101996be1ec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d81bda1938bda987a88f89c7a9e4a2

Files

b8d81bda1938bda987a88f89c7a9e4a2
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ