4486f6ac3e18417e4e804648a8b4c5d8306962454c87a20a8fa297f3f755e69b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4486f6ac3e18417e4e804648a8b4c5d8306962454c87a20a8fa297f3f755e69b
Size

120KB
MD5

dafbb3fec4ddacbe2ed7c4374e4845bd
SHA1

39fec98fd6634287f5154aeab7dc2b349a627377
SHA256

4486f6ac3e18417e4e804648a8b4c5d8306962454c87a20a8fa297f3f755e69b
SHA512

c8e6d1b97791a48d48a1921314dc67ad4c63524aa9e388622feb6d31f35fbd1231030761e817934d7c43eb77fe3ca0d1106001a9e8c7f8b63a6fc30855c9b0f1
SSDEEP

1536:+iqOIJUAxJFq9baY7Y/DylXMT1s+u40MEn7aPPb003KrKbCBN7BMt1G7BCkgm:0xGbaRY8T17XlOQY4K2bCBN7B7Rt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4486f6ac3e18417e4e804648a8b4c5d8306962454c87a20a8fa297f3f755e69b

Files

4486f6ac3e18417e4e804648a8b4c5d8306962454c87a20a8fa297f3f755e69b
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ