9a771196e05e883493c7fd819d723937e80f643c472d8334749445a984f9dd5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a771196e05e883493c7fd819d723937e80f643c472d8334749445a984f9dd5b
Size

3KB
MD5

d04921b74278eb592f372f94af1989d8
SHA1

b30bf5a60fba963bd824fe6c82fa589362589f79
SHA256

9a771196e05e883493c7fd819d723937e80f643c472d8334749445a984f9dd5b
SHA512

1b6c862f42158bff51b99c4b4cb490cd080c13f0a743bc27c9925fb91705e1f1ea02d4c395bc5c224d0befe7d8f1d8e716559532f62609e41567ed61308116c3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a771196e05e883493c7fd819d723937e80f643c472d8334749445a984f9dd5b

Files

9a771196e05e883493c7fd819d723937e80f643c472d8334749445a984f9dd5b
.dll windows:4 windows x86 arch:x86

4ba1a136d4c4284c0ac8c10b292be871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SendMessageA
FindWindowA

kernel32

lstrcatA
WinExec
DeleteFileA
GetSystemDirectoryA

Exports

Exports

DelProc

Sections

.text
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ