6554d688ac75ae216f638d44a1079aecd643d81b33240691da7c6e884b01b3d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6554d688ac75ae216f638d44a1079aecd643d81b33240691da7c6e884b01b3d4
Size

120KB
MD5

31f3acbb0e1c43bbb7f24df4118ea275
SHA1

570ef6cf1323ff3bce0b812b0bd530d71eb48d68
SHA256

6554d688ac75ae216f638d44a1079aecd643d81b33240691da7c6e884b01b3d4
SHA512

e0009a2323cf1eca6219ecfb44434948c4b7a19de7f2e43c37685ee6663ad332cdbdb030fbb5b5d2a1e2287a340f8adc2558bb3aab224129b932f38318781874
SSDEEP

1536:pzVyy1cKtPdPGS39IfShJxwCKFfDZZLladuJAjBWrBhHox1wgO5naM34mEEttWmU:pz3cAPsmYCET8wJOwBhI25n3omtZG7E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6554d688ac75ae216f638d44a1079aecd643d81b33240691da7c6e884b01b3d4

Files

6554d688ac75ae216f638d44a1079aecd643d81b33240691da7c6e884b01b3d4
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ