c47d6951935add99a03eab6dece781cd981f478bc45a5d0e159eb756b3bba02a | Triage

Sharing

General

Target

c47d6951935add99a03eab6dece781cd981f478bc45a5d0e159eb756b3bba02a
Size

120KB
MD5

904aa65a20daeab1a04f076777f8637d
SHA1

32ff13811f4b310a3423571841dde9823633a6df
SHA256

c47d6951935add99a03eab6dece781cd981f478bc45a5d0e159eb756b3bba02a
SHA512

5087ea95502c77503c386c8a806a76fd462cd63505890ea290bb04edcfb27d4c18e4b4ebc2fbef9a1665e4761579bd815a42e90db4ace3d7e98b67db38245fdf
SSDEEP

3072:AstYxboPl50YtGNNByHflmKvnsc0UMQfX+z:AstYJoPl50YavytmgschMQg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c47d6951935add99a03eab6dece781cd981f478bc45a5d0e159eb756b3bba02a

Files

c47d6951935add99a03eab6dece781cd981f478bc45a5d0e159eb756b3bba02a
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ