9e62aed334f6e77c1e68ce0c5811e6d946ed72d8bb32a53caef54fe6b5f1953f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e62aed334f6e77c1e68ce0c5811e6d946ed72d8bb32a53caef54fe6b5f1953f
Size

120KB
MD5

2e64068befe286b778386433fa935be1
SHA1

ffa792f9bed3ab99e1d374324a43f1cc17397a36
SHA256

9e62aed334f6e77c1e68ce0c5811e6d946ed72d8bb32a53caef54fe6b5f1953f
SHA512

1a86ce9f885bdf7f274345d8e1dbaf77edab7bbbbab3eb5e6ee568ad25e950af0a793b7773be22d5d3944813d3695d6405fa02ea5a8b0869434a5f9058ddbf42
SSDEEP

1536:6K9FVlk1QVhVzHC4lBS2JGgWRCJepLfGjcDiD2mTPRJ1nFT+mr1+U+:lFVe8TzHflBxJGTRqALegDiS2R7FCxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e62aed334f6e77c1e68ce0c5811e6d946ed72d8bb32a53caef54fe6b5f1953f

Files

9e62aed334f6e77c1e68ce0c5811e6d946ed72d8bb32a53caef54fe6b5f1953f
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ