597ca045237f82ab6f70c9b05f7020d4e4d44429bd5c9cb7d43eb830d9c51019 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

597ca045237f82ab6f70c9b05f7020d4e4d44429bd5c9cb7d43eb830d9c51019
Size

120KB
MD5

ca0a48828a2e13e36353bda7f66fead8
SHA1

a247169c0df90b7bfec91d35c1e34ddf637d7acd
SHA256

597ca045237f82ab6f70c9b05f7020d4e4d44429bd5c9cb7d43eb830d9c51019
SHA512

bed11735eaa072a54b9ff4f9c4ff9568be0204e620bcf4408afc7d0333dced1c9c9496840ae191879709d2ce815c95364ec60f3d819cc04405d2f3a710cc59a0
SSDEEP

3072:PwTUVfguD9zLoXhhMBVPgUw2yVzymAvQhY:PwTUVvA/6V2xVzymAvQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
597ca045237f82ab6f70c9b05f7020d4e4d44429bd5c9cb7d43eb830d9c51019

Files

597ca045237f82ab6f70c9b05f7020d4e4d44429bd5c9cb7d43eb830d9c51019
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ