b2e7dbd2f35348d4bae3fde0f7d6ec7737135160d5588e3da44519ba9062095d | Triage

Sharing

General

Target

b2e7dbd2f35348d4bae3fde0f7d6ec7737135160d5588e3da44519ba9062095d
Size

120KB
MD5

68c21122ac1615924d45039bd5163947
SHA1

aab2d6ec76779766185540276cba0ec9d5e4a3f6
SHA256

b2e7dbd2f35348d4bae3fde0f7d6ec7737135160d5588e3da44519ba9062095d
SHA512

7f27abb81ddf60f8fbbab5e9b4da5a5a5b0d3712f03a7dbede07f336538da5bc866f7b31fbf7016d7cf39f90a94a6f473bc5ca912171bef39d38696499c12424
SSDEEP

1536:PO/yKZTrsCn166S1BWK2HFuMzFhp+u1Vd1h7vjMoGCnqosaDB2aJd2Oxvde:PIFPn166SjtMAo1h7rMoLqqxfxF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2e7dbd2f35348d4bae3fde0f7d6ec7737135160d5588e3da44519ba9062095d

Files

b2e7dbd2f35348d4bae3fde0f7d6ec7737135160d5588e3da44519ba9062095d
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ