118e1a924880bee215f15cd68737a059e0bfa76013426057f2acf2633f922aa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118e1a924880bee215f15cd68737a059e0bfa76013426057f2acf2633f922aa1
Size

120KB
MD5

52c8d062b4f50733796052c05c1314a7
SHA1

3be00ed0c1bb486f32044fe9170f036c638ae43b
SHA256

118e1a924880bee215f15cd68737a059e0bfa76013426057f2acf2633f922aa1
SHA512

e65c4806be2f7cd30aa5b44f6d3840001fe436329984e89f2486067c8bc06020addb9f4f87c443e7043bf7151883bceb36c0dbc1382d848f88d91b519d25839e
SSDEEP

3072:NZZgTZehCBnDv/at7Qn02dsdmE72Q9wKT:NZZgtecBDX92dLaQ9tT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118e1a924880bee215f15cd68737a059e0bfa76013426057f2acf2633f922aa1

Files

118e1a924880bee215f15cd68737a059e0bfa76013426057f2acf2633f922aa1
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ