6df43a68c487766f1a4f5e07e35f8857468e0c99c1e49a8b7ea08362c950f65e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6df43a68c487766f1a4f5e07e35f8857468e0c99c1e49a8b7ea08362c950f65e
Size

120KB
MD5

5d7a03690e43f74b2962695307826da3
SHA1

1bff3b2a0b71a3412bdae1b919647d822b5bfef1
SHA256

6df43a68c487766f1a4f5e07e35f8857468e0c99c1e49a8b7ea08362c950f65e
SHA512

1410453c9825788070db9075dcfe7550007606ce1d62a92fc42866b9a66bc93bc532ca2f29c74c915e410966a5adfc602cade2ed4539af3767427b1c29c9b6c6
SSDEEP

1536:zF55D7g5XxCfe3aKvSdH+kKdOebjXeCVdeZsenyujWiTPnVBjUM6NeWV9D0RulT4:z/Gg+Pd7uekZse1TjjUh4PReTAd2s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6df43a68c487766f1a4f5e07e35f8857468e0c99c1e49a8b7ea08362c950f65e

Files

6df43a68c487766f1a4f5e07e35f8857468e0c99c1e49a8b7ea08362c950f65e
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ