683c8e78f8e79d64804752e72c52fef12a5311be347e34c56eb48e1c645ed6f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

683c8e78f8e79d64804752e72c52fef12a5311be347e34c56eb48e1c645ed6f2
Size

120KB
MD5

66980e878e2bbb1e3bb61a31537fcddf
SHA1

0a145eef3b2a025ebae5c565347ef9f61a1cbd28
SHA256

683c8e78f8e79d64804752e72c52fef12a5311be347e34c56eb48e1c645ed6f2
SHA512

637b9eeec57f415d15c3f7c8b5b875fe56410b2c59c53cdf1f3600bdca63b278b390e8b0c7bc5226d7cf23364c7a9721a3cd8afc5a314546e7fad109b695f3ae
SSDEEP

3072:Q2eAA7c5sx5qCHYMX9JKG9Mx/EtideI7/JnO41Yjr:Q2eJ7c5sxUqFTKG92d3r1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683c8e78f8e79d64804752e72c52fef12a5311be347e34c56eb48e1c645ed6f2

Files

683c8e78f8e79d64804752e72c52fef12a5311be347e34c56eb48e1c645ed6f2
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ