4fa9b799e664b679b255cacfd2e78959f6e4f34ea920a4d6716ceec90bb871e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fa9b799e664b679b255cacfd2e78959f6e4f34ea920a4d6716ceec90bb871e9
Size

120KB
MD5

4c21b128a64bb21a112297987c0dcbe7
SHA1

f7bc31bfcc1330c7672a443791f9a3b1fc5c59b7
SHA256

4fa9b799e664b679b255cacfd2e78959f6e4f34ea920a4d6716ceec90bb871e9
SHA512

3fc64b732e36ea4048d9192c407d51d505654ecc356920c3de2ca81a3a1e4b78533e575171827314ce587145f87b7147b1ecc01a392b4d3499a14e118913baa1
SSDEEP

1536:kpCHlBYJGtu0DSByV4FJEP0vMEBb2Wt5C8f4DG8OqbT/lnF9+dBRS9+4QNFPh:oCHoazS0V4FkpvOqbTUdjNZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa9b799e664b679b255cacfd2e78959f6e4f34ea920a4d6716ceec90bb871e9

Files

4fa9b799e664b679b255cacfd2e78959f6e4f34ea920a4d6716ceec90bb871e9
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ