6595062440e5300c877b37604580d9067b3bf4c2d2f18e4ff56e98c3d6ea02c9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6595062440e5300c877b37604580d9067b3bf4c2d2f18e4ff56e98c3d6ea02c9N
Size

3KB
MD5

7bc4ce59b00517175ef08b9aae0de1a0
SHA1

8a67e596fc1f21b9d34cc61638e7f135a36711e7
SHA256

6595062440e5300c877b37604580d9067b3bf4c2d2f18e4ff56e98c3d6ea02c9
SHA512

866b927e3e7b64ad233422e7c62314032b91cd3c1ea7b6d4311da02027db4226d98bf61a920bc2bb054d2ebbba063130421836e8c6f7fba98ef02ef8ad7afe51

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6595062440e5300c877b37604580d9067b3bf4c2d2f18e4ff56e98c3d6ea02c9N

Files

6595062440e5300c877b37604580d9067b3bf4c2d2f18e4ff56e98c3d6ea02c9N
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ