2c16254401f99325902196fb9053cefaab671cf8957224e2d5b68adf0b4d27e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c16254401f99325902196fb9053cefaab671cf8957224e2d5b68adf0b4d27e6
Size

120KB
MD5

91c842103cdc45d0e48c052165c9886f
SHA1

c72bb1b4363baa3f146b38d2bf44f9382bc87b43
SHA256

2c16254401f99325902196fb9053cefaab671cf8957224e2d5b68adf0b4d27e6
SHA512

b224535f97633c2809a3b7a3eec8ecf5ea7c1b30442b1ff6134e849f8fb4760b35e1dbfb0a5411d05672ce2ac624a7df5b3fb40ac1ca44d42bb726f49f70dc93
SSDEEP

3072:PSZCPvA7V207HcYW4i3q98X2bW2LOH01MTG:GCg7b7H5Xi0uwWF00

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c16254401f99325902196fb9053cefaab671cf8957224e2d5b68adf0b4d27e6

Files

2c16254401f99325902196fb9053cefaab671cf8957224e2d5b68adf0b4d27e6
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ