c158dc2b77f9634c9c0a4091c7768447696feffed354a729b6b5873e14d22889N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c158dc2b77f9634c9c0a4091c7768447696feffed354a729b6b5873e14d22889N
Size

4KB
MD5

21d9e1d9d4787f1e0f3009cc09c64190
SHA1

bff0876bda1b3669f97c47b282387853cfb6837b
SHA256

c158dc2b77f9634c9c0a4091c7768447696feffed354a729b6b5873e14d22889
SHA512

60fc1d3dd5b61b19642e13548030456e6f32cc0cefc6a6348c7adb48bc9d87a7a01383e4909f41a9a0fd2e91981212bc62460ae4e4539fdbfbd4993887cd1923

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c158dc2b77f9634c9c0a4091c7768447696feffed354a729b6b5873e14d22889N

Files

c158dc2b77f9634c9c0a4091c7768447696feffed354a729b6b5873e14d22889N
.dll windows:4 windows x86 arch:x86

37fcd669b0a537d1e26c3b0ee10e3a65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
OpenFile
ReadFile
CloseHandle

Sections

.text
Size: 512B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ