73b9af666612320e49327048a60f6a61ed409b94c846ca76cd2b747d02df1bee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b9af666612320e49327048a60f6a61ed409b94c846ca76cd2b747d02df1bee
Size

120KB
MD5

e3819703364464b5359daf17d2923a85
SHA1

f5b066ad97d5d822ff2061fd6ed4162756381521
SHA256

73b9af666612320e49327048a60f6a61ed409b94c846ca76cd2b747d02df1bee
SHA512

ee66613230f0b694cec78219b40a17d88285390e7f56e3873d7d4e9649070e4b147138f5dc6abc8ced65ebe3608431d21c6b7b30b25a94efd04eab49d260f748
SSDEEP

3072:tDTC690k2/ScmLZW5iEmOGUo8oPiWQb6jvo:1u690Z/Sc6TbURjWm6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73b9af666612320e49327048a60f6a61ed409b94c846ca76cd2b747d02df1bee

Files

73b9af666612320e49327048a60f6a61ed409b94c846ca76cd2b747d02df1bee
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ