cf345ad87393eb3f730ce923f8c5ed4b680599f3479e4cf700d8f11f3f0ca38c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf345ad87393eb3f730ce923f8c5ed4b680599f3479e4cf700d8f11f3f0ca38c
Size

120KB
MD5

3f8a327e95c601f66419c083718dd7ec
SHA1

4d50e34a7b59c7b253a585dd0414c945e4247084
SHA256

cf345ad87393eb3f730ce923f8c5ed4b680599f3479e4cf700d8f11f3f0ca38c
SHA512

5c0f903ba505d1dc72d83e21c3bcdcd09154469054bb26bdb3ce6210760b06fa45789562e8e0371d7721b81dc7e9eb996f34fa0d4dad50be58e883ae9c511b00
SSDEEP

1536:yR+5NBxsRz7hoq18owBkuXeUma6Rla4XgITJi3g8xlh5BH1YqnSluv5Uh/:ym0Vh/8ow+UhAgIVi3XDTIqnj54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf345ad87393eb3f730ce923f8c5ed4b680599f3479e4cf700d8f11f3f0ca38c

Files

cf345ad87393eb3f730ce923f8c5ed4b680599f3479e4cf700d8f11f3f0ca38c
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ