64b8f9f5155aa3633e1b47d5ac57f6a23aa44e90ba56f66291143e1df0a91701 | Triage

Sharing

General

Target

64b8f9f5155aa3633e1b47d5ac57f6a23aa44e90ba56f66291143e1df0a91701
Size

120KB
MD5

133048d2d075e9ff4e0fd9089ed893cf
SHA1

91e35dc46302f298a32aae165e6e7a890bebad18
SHA256

64b8f9f5155aa3633e1b47d5ac57f6a23aa44e90ba56f66291143e1df0a91701
SHA512

004dd1257b00472e9e59bf0004211268f5269c583cfec7f53e5fbdcb0ffa9cab8f8f2c34e9ecda3682acd5d32e928575824147642902eb1b2196994ac1e94156
SSDEEP

1536:lNnP5boe/Pml0jmbdqid9LsyFoeWEdPBrrKDIZZJScmgrWZSTpKc61fzxR8su5jL:vP1Pmijmbpd9wyFogDYZcd/61fzxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
64b8f9f5155aa3633e1b47d5ac57f6a23aa44e90ba56f66291143e1df0a91701

Files

64b8f9f5155aa3633e1b47d5ac57f6a23aa44e90ba56f66291143e1df0a91701
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ