3a8dbf4ec670c362c0bc9afa87b2fe1b36d205b632380a7449a02a34b6728097 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8dbf4ec670c362c0bc9afa87b2fe1b36d205b632380a7449a02a34b6728097
Size

120KB
MD5

38b2e7c81aafe241aa54b49f774764e9
SHA1

becb1e885b5b41cefe8a84de9f54ac290ad09c31
SHA256

3a8dbf4ec670c362c0bc9afa87b2fe1b36d205b632380a7449a02a34b6728097
SHA512

af8c206e59d17790615e945099eb25aa7c521e4b71da15ff8da19e76bedaa2db11da41b8d16c0c748a408c65986da21eeb95aea9c88f094539aab5c1fd1d4b98
SSDEEP

1536:WgX8Tic+cXuZIYsOM9/zyXtiMyiL1rG7ngUQvgmdp812YW7fA/5ZI2avDqjIJ2e4:RX8ec+aFELL1rG79IBJCZYDqRe5sjMe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8dbf4ec670c362c0bc9afa87b2fe1b36d205b632380a7449a02a34b6728097

Files

3a8dbf4ec670c362c0bc9afa87b2fe1b36d205b632380a7449a02a34b6728097
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ