4932e03b66a046298ae4235c0a08c97d57d99803007e8f75603944cb96c351edN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4932e03b66a046298ae4235c0a08c97d57d99803007e8f75603944cb96c351edN
Size

3KB
MD5

8c6e59c3e33569a39f9c58f6503e9b30
SHA1

8d753b12ef5c5b5bb0abd06394a67f5b739d5149
SHA256

4932e03b66a046298ae4235c0a08c97d57d99803007e8f75603944cb96c351ed
SHA512

f32bee62b3a0badb525594ca6d026390c4e0b43866f6cf7b80c2905a599e322e459bb6bb7cbd9526ab18d23ea6b736d9492f6091e462dad6ff76af377fdc2d87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4932e03b66a046298ae4235c0a08c97d57d99803007e8f75603944cb96c351edN

Files

4932e03b66a046298ae4235c0a08c97d57d99803007e8f75603944cb96c351edN
.dll windows:4 windows x86 arch:x86

24a9d698157614300b4f12a31e0a92f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

memset

kernel32

HeapCreate
HeapDestroy
ExitProcess
GetModuleHandleA

Sections

.code
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ