c6766e50407d026c16fdb17e0465b6c4732a806be1a4c34605ddadd22c4201b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6766e50407d026c16fdb17e0465b6c4732a806be1a4c34605ddadd22c4201b7
Size

120KB
MD5

254dc86437b09379254f5e967401a430
SHA1

e3f444dd0bc51f700898e0f4a972c905e7a8f34d
SHA256

c6766e50407d026c16fdb17e0465b6c4732a806be1a4c34605ddadd22c4201b7
SHA512

687b0a48b44a66ad5349c9380abf9ad70815b49fa0488b3d0013b40287df2090f79f1defe59dfef19c40d603a3ad31167ebbd3498c2b7595dbb9a373b9e95aed
SSDEEP

3072:x0e59QmkFSU2Cezcw63I9IHgtMAi+fHGD7pOfL8F:x0s9Q0FB6C6Ai+fGDYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6766e50407d026c16fdb17e0465b6c4732a806be1a4c34605ddadd22c4201b7

Files

c6766e50407d026c16fdb17e0465b6c4732a806be1a4c34605ddadd22c4201b7
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ