657c569d979cab01777476413c36cefce1b26efd165dcef6efcc4d9f71e63534 | Triage

Sharing

General

Target

657c569d979cab01777476413c36cefce1b26efd165dcef6efcc4d9f71e63534
Size

120KB
MD5

57174b61a9f9c01790b74a83e3a8ab63
SHA1

5231bedd1ad0254cea1aaca5d3bb3d143d7c80da
SHA256

657c569d979cab01777476413c36cefce1b26efd165dcef6efcc4d9f71e63534
SHA512

ff0b89219864381ce6fdb76e7aca630c708e79888634ddeef8b4c41e616452966351ad39b098b7cc6382a09f26230c592458965625054751156466ea7fc59498
SSDEEP

3072:iwMmE7AP/BMvpnIzCdasFgsBc+ROWvfQ9vhFx5:omE7AnCVRysBr06fQjFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
657c569d979cab01777476413c36cefce1b26efd165dcef6efcc4d9f71e63534

Files

657c569d979cab01777476413c36cefce1b26efd165dcef6efcc4d9f71e63534
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ