5689a6a59d649fdf5f7c690becaa0eb885f67bd5c1cae2e230b1d8f9b1cb6bd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5689a6a59d649fdf5f7c690becaa0eb885f67bd5c1cae2e230b1d8f9b1cb6bd6
Size

8KB
MD5

c150181ea9f7e691259c26c2112a47fc
SHA1

a4cde277151cef110b5228b0c7fb3ae3bd2778c3
SHA256

5689a6a59d649fdf5f7c690becaa0eb885f67bd5c1cae2e230b1d8f9b1cb6bd6
SHA512

b78254fc78b9ccabd39ca97ff6402ea5b09bd940898a85958275d5f37e3e89e13ca87eb202123743763db4e6908fe93da987546a42ca167b6a645ab192da5410
SSDEEP

192:dLHBKpbUD5jKXvR8pN6PW1+fskYU8qncsoDsZfJdPTm51DYWI+:dsbUFKXy+PW1+7DWsoDcfJ9l1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5689a6a59d649fdf5f7c690becaa0eb885f67bd5c1cae2e230b1d8f9b1cb6bd6

Files

5689a6a59d649fdf5f7c690becaa0eb885f67bd5c1cae2e230b1d8f9b1cb6bd6
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ