298be6ae5caeda1b7aaf99628fa6da6ad88cf26f907acd251f4c2bb1759b5674 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

298be6ae5caeda1b7aaf99628fa6da6ad88cf26f907acd251f4c2bb1759b5674
Size

120KB
MD5

315bd3167e5c73c21a870c8a09441dc0
SHA1

4207e74b3f791620ab8c6f89fe2ced4212d2c1e2
SHA256

298be6ae5caeda1b7aaf99628fa6da6ad88cf26f907acd251f4c2bb1759b5674
SHA512

ce17074378dddb6baa1c0f077e2573d6317ccac7be677805ec15db1a62b9e1c68f61499dc8f55946a8bf0d0e7198cd5bf67329c74b19d2721baee50a282b67eb
SSDEEP

3072:McDSnvC+OtyGIyA0j4eemQaoqem9EzA+fl26/nlOfIzc11sr:M3MtQUHPoqTkAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298be6ae5caeda1b7aaf99628fa6da6ad88cf26f907acd251f4c2bb1759b5674

Files

298be6ae5caeda1b7aaf99628fa6da6ad88cf26f907acd251f4c2bb1759b5674
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ