0f90a58e2169df54867de8b8f4ea14335dd68d459898978ea31b0ae7c993e994 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f90a58e2169df54867de8b8f4ea14335dd68d459898978ea31b0ae7c993e994
Size

120KB
MD5

d40f7fb821122a012faa4e96202378bb
SHA1

d2e67285984356f3563594fce6bd99a718c72ae5
SHA256

0f90a58e2169df54867de8b8f4ea14335dd68d459898978ea31b0ae7c993e994
SHA512

c632e576fd65b2d318acf9f4909f8aa2be1c383fa8c52db71fed62f927ac432ea0bfd934e61519e21797c4c2f6552b3e322ed95e19e65fdd72339c762ef2f424
SSDEEP

3072:/KYgBy/qGGSgXu5Q/BF1LJ5Dr2XHb97W5Z3Yc9:SbuGB+5QZTHkbIbIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f90a58e2169df54867de8b8f4ea14335dd68d459898978ea31b0ae7c993e994

Files

0f90a58e2169df54867de8b8f4ea14335dd68d459898978ea31b0ae7c993e994
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ