1b09fd53865e833a5d56df702883dbd482f4eb95d659f319b1ccb315b8a8384c | Triage

Sharing

General

Target

1b09fd53865e833a5d56df702883dbd482f4eb95d659f319b1ccb315b8a8384c
Size

120KB
MD5

49a8cf88da73baa95c50e2ed836763cb
SHA1

8d4578a7b23ea6800ddbe9fe83d3428ee2b30f4e
SHA256

1b09fd53865e833a5d56df702883dbd482f4eb95d659f319b1ccb315b8a8384c
SHA512

a34a6364fcda8676d0bb8092dc1f51a91ff2b0a67e7850752e050bbddc187869b1d8aaa465c5e73c635b3f98a14fd2e66a4dc7aae26d502feaf43371bd46bd87
SSDEEP

1536:xhsrOG78vVsj9oq62VBl+SfWfqObX8E+0Lky0Jr3LEIv6ij:nC78vI9oq62VBGaQf0Z3LEIbj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b09fd53865e833a5d56df702883dbd482f4eb95d659f319b1ccb315b8a8384c

Files

1b09fd53865e833a5d56df702883dbd482f4eb95d659f319b1ccb315b8a8384c
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ