13d333d5e3c1dd6c33dfa8fc76def6109b5187d4ce6bb82a34a8bf311b027d79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13d333d5e3c1dd6c33dfa8fc76def6109b5187d4ce6bb82a34a8bf311b027d79
Size

11KB
MD5

46b977a0838f4317425df0f2e1076451
SHA1

39381976485fbe4719e4585f082a5252feedbcfd
SHA256

13d333d5e3c1dd6c33dfa8fc76def6109b5187d4ce6bb82a34a8bf311b027d79
SHA512

bc5d0a6fd8f1bc98daa46db1ff95bff4bda51f35c4a51ed9b796e708c470d7a6b92b2cbd29de230fdf30a637bcf2f7ac94e720a32165ec19523ec29600e3d841
SSDEEP

48:ZAatawIaBO+UGyYRDZDFuZ7WdHT5M9U3XZu8wFYuRci1XT3wCNP:Z5MwXlyQ5FuZ7W9Xpu8nulXTgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d333d5e3c1dd6c33dfa8fc76def6109b5187d4ce6bb82a34a8bf311b027d79

Files

13d333d5e3c1dd6c33dfa8fc76def6109b5187d4ce6bb82a34a8bf311b027d79
.dll windows:1 windows x86 arch:x86

cf2733f40585945e7354a1141b1a049d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualAllocEx
VirtualAlloc
VirtualFree

Exports

Exports

ClearMyTracksByProcess

Sections

AUTO
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ