cb78e296ca257235f5f09ac395aa702add017882a7a97a03aa95f6e2592d595a | Triage

Sharing

General

Target

cb78e296ca257235f5f09ac395aa702add017882a7a97a03aa95f6e2592d595a
Size

120KB
MD5

ce1e5bd6d3831be62f6b02eaad6d7d00
SHA1

3edced7231c432c4a09b273e017d2371088e6591
SHA256

cb78e296ca257235f5f09ac395aa702add017882a7a97a03aa95f6e2592d595a
SHA512

efc940462c1dc363f8ca43607ecf0b1d664a9fddc1fe2e4fd631ce7b85abdbfdd00299f16da049158339bee155760f875164f64f1a809322fdfca0b871b9528a
SSDEEP

1536:JlgVYx/ruJxVKmewG8IQlrLZU4X2h4YNnlBdSFOV8JOHsfxRifiZ+ApOh9dHC0e:JlxjsxV9hLJXo4OlDSMCJ4w+fevpOVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
cb78e296ca257235f5f09ac395aa702add017882a7a97a03aa95f6e2592d595a

Files

cb78e296ca257235f5f09ac395aa702add017882a7a97a03aa95f6e2592d595a
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ