7e3139de0044db1a439cdeef2ed0902623f332876cb03c7f889ee556911bed03 | Triage

Sharing

General

Target

7e3139de0044db1a439cdeef2ed0902623f332876cb03c7f889ee556911bed03
Size

120KB
MD5

d389103ed6494ef0c85925b651421b62
SHA1

5f5bad2d1742800eb2e1f451301008b802e2d1d7
SHA256

7e3139de0044db1a439cdeef2ed0902623f332876cb03c7f889ee556911bed03
SHA512

4bc09f2c6b1aa4eea83f38d65033daae9aa24469cc2e99f59157682662ceaaade66948e59ed08b387e409cfb00ed6a0cce103dbf7a8861658cd3c2a9086dd156
SSDEEP

3072:5aqzJQrSjJyujIsJg82BmGGlkvgR1MQd+8dZDnyS6s:MqzCWjUujIvTM/Ld3dZD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e3139de0044db1a439cdeef2ed0902623f332876cb03c7f889ee556911bed03

Files

7e3139de0044db1a439cdeef2ed0902623f332876cb03c7f889ee556911bed03
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ