52869b0a833b1d8217138ff154c17e73a31cffbc8aa61a6917188ccd60be78c9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52869b0a833b1d8217138ff154c17e73a31cffbc8aa61a6917188ccd60be78c9N
Size

3KB
MD5

47a9538384d6d251ac6e589a0c3238c0
SHA1

771ded604ffc9a35e6f92de9082728dd5c938f13
SHA256

52869b0a833b1d8217138ff154c17e73a31cffbc8aa61a6917188ccd60be78c9
SHA512

64fa08a5a183041dcf2cb1fcce14d6f418fde5d109c4fa21fe05e10de99b993f4256b3345e33e7fbc60a10ccb79d25f2b7dd3a6dc502091784486baad0bd5f84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52869b0a833b1d8217138ff154c17e73a31cffbc8aa61a6917188ccd60be78c9N

Files

52869b0a833b1d8217138ff154c17e73a31cffbc8aa61a6917188ccd60be78c9N
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ