4de272fa3f5ed1a56ab5f31be43abc2c76b82eb2c692e949c2c5b94fb9e69635 | Triage

Sharing

General

Target

4de272fa3f5ed1a56ab5f31be43abc2c76b82eb2c692e949c2c5b94fb9e69635
Size

120KB
MD5

a7464f2f972ebc35e3fe76c2709a2ea9
SHA1

3fa97205f3557f1366dc5ea327f0f6bfc6f21f66
SHA256

4de272fa3f5ed1a56ab5f31be43abc2c76b82eb2c692e949c2c5b94fb9e69635
SHA512

27feec62aa5935c8de403c67a159d51a861b7345d549ba1d14577d8159b00dab08210cbcd5114c35143da967df7f62c95509d68d2813972cb88c73466afea2db
SSDEEP

3072:ltql22FQPyFYuLENTEvDhAl2Hp8FL/cf:WlHQPyakETEvD2lGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4de272fa3f5ed1a56ab5f31be43abc2c76b82eb2c692e949c2c5b94fb9e69635

Files

4de272fa3f5ed1a56ab5f31be43abc2c76b82eb2c692e949c2c5b94fb9e69635
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ