51957378933d33fc360193f9ebcdb16047dc9ae082bf6f7f892b0756daf181fc | Triage

Sharing

General

Target

51957378933d33fc360193f9ebcdb16047dc9ae082bf6f7f892b0756daf181fc
Size

3KB
MD5

11def200209d2852a52478176d35a92e
SHA1

bfd5cfea5a54c643b451b73ed4c004f5afd47df6
SHA256

51957378933d33fc360193f9ebcdb16047dc9ae082bf6f7f892b0756daf181fc
SHA512

09970c6919194aafe32db579a3053dcb342471e74e054ddcef0752e8b3ad614f96737f1725135ac620cd2f789527dba79db24e8231c47d8f2cb07d0d1e5dfbba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51957378933d33fc360193f9ebcdb16047dc9ae082bf6f7f892b0756daf181fc

Files

51957378933d33fc360193f9ebcdb16047dc9ae082bf6f7f892b0756daf181fc
.dll windows:4 windows x86 arch:x86

7954d57c0798b3f0fa107569b25940df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetWindowThreadProcessId
FindWindowA

kernel32

WriteProcessMemory
VirtualProtect
CloseHandle
OpenProcess

Sections

.text
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ