601f688c660b9bcd72e667a951d4383da25c1dfcb546ccb13d0a068088c556b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601f688c660b9bcd72e667a951d4383da25c1dfcb546ccb13d0a068088c556b4
Size

120KB
MD5

78d81779ca1f882b467e197558be8c1e
SHA1

efe188279a5709e3e34aa19d0e10ac555ff61d71
SHA256

601f688c660b9bcd72e667a951d4383da25c1dfcb546ccb13d0a068088c556b4
SHA512

33a8b3ee69d90ce1292f032aa72c859619f2fd43b29f5e94bd554c82bd376d753e37bead746720fcac02c5708390bb3b100b8d9e6cbcc05dbb98b3abc022159d
SSDEEP

3072:u8hK7Agl5lVE0vbm/vOISuckifMvg8FUE:JK7f5lCOSSufi0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
601f688c660b9bcd72e667a951d4383da25c1dfcb546ccb13d0a068088c556b4

Files

601f688c660b9bcd72e667a951d4383da25c1dfcb546ccb13d0a068088c556b4
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ