65632ba501f9a4ce24fe8dbe8e68564be921bb8de55922f506b8dd6312fb179e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65632ba501f9a4ce24fe8dbe8e68564be921bb8de55922f506b8dd6312fb179e
Size

120KB
MD5

183d0f6f7fb0db22930564f110055fa9
SHA1

f9fecf3517df220601d0e29bc48be90aea58e32a
SHA256

65632ba501f9a4ce24fe8dbe8e68564be921bb8de55922f506b8dd6312fb179e
SHA512

cc3bb74fabd51d5856f8ff19e8554cfef63af323141595713b636d719de1228140a607c8811d8a33cc46acd294b8c4a978029eb275b8fd29a012b76b6f09746a
SSDEEP

3072:FTUiNv8IeGweObsbLlOJraMDsrXU+0zY0gR:Fw6IGweeOinsrIzY0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65632ba501f9a4ce24fe8dbe8e68564be921bb8de55922f506b8dd6312fb179e

Files

65632ba501f9a4ce24fe8dbe8e68564be921bb8de55922f506b8dd6312fb179e
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ