277ece483099924369f4df110b2b588c6bc2cf8757e4691cf385a3f35e82fd23 | Triage

Sharing

General

Target

277ece483099924369f4df110b2b588c6bc2cf8757e4691cf385a3f35e82fd23
Size

120KB
MD5

c73cda124b4727983b926c4e94957a95
SHA1

a0aeb2e77674ed3bd86399e6bf44204d593cf92e
SHA256

277ece483099924369f4df110b2b588c6bc2cf8757e4691cf385a3f35e82fd23
SHA512

223985bea00df6bf903033248c196e2b2d1b3b41f87b5b15bdc47d1baa4765b99f9cd05c3dab7009c117a7934bf25a6e50acaca63fbe2abae8fcd398905b1609
SSDEEP

1536:HkNg/4lRlgR+RBT3XMBCmvgT8why5At3q5LOjWD7bmmqUfpgX2GsvhM8nDTsvMpo:EN7RlI+P3XMS/hyX8oicn/XsvMKa1fZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
277ece483099924369f4df110b2b588c6bc2cf8757e4691cf385a3f35e82fd23

Files

277ece483099924369f4df110b2b588c6bc2cf8757e4691cf385a3f35e82fd23
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ