6b490e173ede1a6991633033e393505e74538de92bdd53b63f4a4caaefa24d11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b490e173ede1a6991633033e393505e74538de92bdd53b63f4a4caaefa24d11
Size

120KB
MD5

abcd395d13cb3f54869de6d5adf2333d
SHA1

89247ac7e3aacc5fd797747bc3a5972c2b9c5b85
SHA256

6b490e173ede1a6991633033e393505e74538de92bdd53b63f4a4caaefa24d11
SHA512

faa9d0231fe200d28cc77e7112f6f7ef03a0fbda372854619c7a60c004909dc3f37b7e1f34a026c85c431aaba252f9f1ca5c4bb2d9c8cf3b75754c728957da1a
SSDEEP

3072:dsM8g5Emn7uONgAP2ykGnxHNp7rze/PahzLI:qQn7nisWABeqhw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b490e173ede1a6991633033e393505e74538de92bdd53b63f4a4caaefa24d11

Files

6b490e173ede1a6991633033e393505e74538de92bdd53b63f4a4caaefa24d11
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ