de8d36bff7dc8b95c2a732cd08a0369acc5cfc0dda7d50c108c643d4e9786da2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de8d36bff7dc8b95c2a732cd08a0369acc5cfc0dda7d50c108c643d4e9786da2
Size

120KB
MD5

9177294d2017718a65fc268558b62ad5
SHA1

9ebfd37a7ffb095f29aba8458acb2767ab20026c
SHA256

de8d36bff7dc8b95c2a732cd08a0369acc5cfc0dda7d50c108c643d4e9786da2
SHA512

691d6ad8f3721a749bb53ba8db55c8db50768d7f536b7fafbc15d956a0982120eda202dacfde70b6c50206ea9dcc8e1faea8f9e123c4a8c66b04d9b4769beb2a
SSDEEP

1536:fR9mPV7ow9Ebdf/jXZkXjJ9jbqx8kVO6/rrzYWQGCxnbm28cOxQakF+HdWxoTz/L:3mPN9OdHwjPjWx8ACxiJlxnf9WVkbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de8d36bff7dc8b95c2a732cd08a0369acc5cfc0dda7d50c108c643d4e9786da2

Files

de8d36bff7dc8b95c2a732cd08a0369acc5cfc0dda7d50c108c643d4e9786da2
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ