6b891c72a70652580281bbd39b30c1f4424ea32b846d0a0c68541387aeade02f | Triage

Sharing

General

Target

6b891c72a70652580281bbd39b30c1f4424ea32b846d0a0c68541387aeade02f
Size

120KB
MD5

a64239e28dd6623e2317e8c27c2792ad
SHA1

18440ffc7a3b1108d899bf8a804215626a91a702
SHA256

6b891c72a70652580281bbd39b30c1f4424ea32b846d0a0c68541387aeade02f
SHA512

c8107e6eaa51b35caa9c6143caa752c2b735ad043249e1e78158ea171e63858b5d9fa7be516338894fa8c08ef8fc0c8722a48739069c34de3983c137e7053183
SSDEEP

1536:7LuTbR0Tw7EvXkd+yLvUc6ftLtgAyCsJz4Q7PlQRBM3CUmTAGaqnEChpG8L/ZU5:7LuTbRQ0Ev0d+yLM/9tgAB0LZTSLaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b891c72a70652580281bbd39b30c1f4424ea32b846d0a0c68541387aeade02f

Files

6b891c72a70652580281bbd39b30c1f4424ea32b846d0a0c68541387aeade02f
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ