a8fde4df03a6274c2f744faa1ca22e1e584a943677c9971a2b44fe4d693f3b9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8fde4df03a6274c2f744faa1ca22e1e584a943677c9971a2b44fe4d693f3b9b
Size

120KB
MD5

96b2648792064e49a76b2f8a2e8986a7
SHA1

c3c39f8999c3d2120ca9b407d054523933a364e2
SHA256

a8fde4df03a6274c2f744faa1ca22e1e584a943677c9971a2b44fe4d693f3b9b
SHA512

cc06126a0aadd83e9ee7bd2f7993926cd423aba47482b3e526a0cb2f692008a509816c234bf0d50df536000341977e0f969f5e6eb9945f1251b4390f889f3242
SSDEEP

1536:SeWyylEK5DIUf4mE+ZJ5UaSK0pzsGS6L/YGKEpa+BXPK7+5eU/V0MH8FxJIpokmN:StNVJQK01srM/YGKEpRBp5e2pcFxfN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8fde4df03a6274c2f744faa1ca22e1e584a943677c9971a2b44fe4d693f3b9b

Files

a8fde4df03a6274c2f744faa1ca22e1e584a943677c9971a2b44fe4d693f3b9b
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ