98447dc00561f10d961c65f81acade67157a35ad77a1a84f9b1e7aa44d9c2ad3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98447dc00561f10d961c65f81acade67157a35ad77a1a84f9b1e7aa44d9c2ad3
Size

120KB
MD5

ba229f501d070b296f7e4fb20cbd27a9
SHA1

14c80baf09429abc659f16baa2238e94dc09eaa7
SHA256

98447dc00561f10d961c65f81acade67157a35ad77a1a84f9b1e7aa44d9c2ad3
SHA512

8e4c5149e061448983df4f3b9bb1fb20c7be438183a3b087be5f03c5642323b617baccff0f495cb52aa29c0dfbcb9b2f6af34305d8c247fe4ed691b10877c9bd
SSDEEP

1536:d45BnsQdWEeVx/qjZzI0tgwA8r23G/ePjSHkr5v3/ExdnzRUoZAMjt8jtdW+4qC:uA/gI0tR2+Ir53YdJxjtmdW+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98447dc00561f10d961c65f81acade67157a35ad77a1a84f9b1e7aa44d9c2ad3

Files

98447dc00561f10d961c65f81acade67157a35ad77a1a84f9b1e7aa44d9c2ad3
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ