79be5b37d33fac5ed2ec283d1260d4d4 | Triage

Sharing

General

Target

79be5b37d33fac5ed2ec283d1260d4d4
Size

3KB
MD5

79be5b37d33fac5ed2ec283d1260d4d4
SHA1

8992f088f85f1ca912818492ac6762bbbd6d3fb5
SHA256

0c255d21bacb5c875a30dfc78fc37509045727e61ac39fd1cfa3fed00e43c412
SHA512

260c22eee8ff4f79ebc242ae84fb7f4863ed5fd30b870b501da026d960c9c9f06639dab684784237d9a1318760267f783ca438127b5eaa5c2f47b77e8c3bb12a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79be5b37d33fac5ed2ec283d1260d4d4

Files

79be5b37d33fac5ed2ec283d1260d4d4
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ