948b9a0a1289e60bef06a547c6ebb9fb032cfff6c738accc7d9c3b0fb8fdfbd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

948b9a0a1289e60bef06a547c6ebb9fb032cfff6c738accc7d9c3b0fb8fdfbd1
Size

120KB
MD5

4eae6b2e5635ad34d664864e147f0f2d
SHA1

145c6cab6f374b929a6aeec8c48e4aac60997876
SHA256

948b9a0a1289e60bef06a547c6ebb9fb032cfff6c738accc7d9c3b0fb8fdfbd1
SHA512

14f8dca9a8348295c8bcf1b5b5df495d35832ed77c0068c8fb68c8363fb699e1e82f033633ae4dfa4456853583b309bc270841515d52c340ffdc8cd16abc750e
SSDEEP

3072:izNK4uqQWvq54EdSV+WTeT1Gun4VdNMA8V2X1zrAE:YK3q/C5rw8pGu43Nu0trAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
948b9a0a1289e60bef06a547c6ebb9fb032cfff6c738accc7d9c3b0fb8fdfbd1

Files

948b9a0a1289e60bef06a547c6ebb9fb032cfff6c738accc7d9c3b0fb8fdfbd1
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ