22603d349522e899c5be25cefa0602e5881490599577f80d1f5c4e121fe59664 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22603d349522e899c5be25cefa0602e5881490599577f80d1f5c4e121fe59664
Size

120KB
MD5

4aa53599de25fb5ecd826380a6a5b111
SHA1

df3f7aa7dbbc4b30a4e28f6067744966d879ee55
SHA256

22603d349522e899c5be25cefa0602e5881490599577f80d1f5c4e121fe59664
SHA512

583827b3ba6a9382834e219ee82cabb2ec4592eb7fe39cc294b6bf53a3dd02e0ee1afbaf3f39d3733b4984ec76a962a0035833175716e15cb1efb94f1f83defb
SSDEEP

3072:NFiAG+hmDf5XNzK1shxVIdZz/l7UNyBg:NY7DfzzK1sDVIz/ygC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22603d349522e899c5be25cefa0602e5881490599577f80d1f5c4e121fe59664

Files

22603d349522e899c5be25cefa0602e5881490599577f80d1f5c4e121fe59664
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ