f81ecf59f98fbe5a4ef26d7c61dcb7a9f879614cfef46fb9c1c260c37cd447c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f81ecf59f98fbe5a4ef26d7c61dcb7a9f879614cfef46fb9c1c260c37cd447c8
Size

120KB
MD5

44e96dcb22d098f59906954aae656f8e
SHA1

1fb81a98d6eb07a7c3dabd43a4611a47dc367ce6
SHA256

f81ecf59f98fbe5a4ef26d7c61dcb7a9f879614cfef46fb9c1c260c37cd447c8
SHA512

0ba02c7b3d32ded3326823cc128f28191e25ebbfacb4f8a561b23959062879ea1b14cd290a8d49a5dfd35c65a1c54f63586e26805b3b3bbfc5d96f8489ee447f
SSDEEP

1536:S8rSR29XoH0QqDhtRp/Ey2NSRqsSL7unXEh5O64r3cmEJ6g5LnSk1ivwnAmCyEV:S8WwZtrcGf8qoAcP5TSk1/AmeV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f81ecf59f98fbe5a4ef26d7c61dcb7a9f879614cfef46fb9c1c260c37cd447c8

Files

f81ecf59f98fbe5a4ef26d7c61dcb7a9f879614cfef46fb9c1c260c37cd447c8
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ