94b52422350e63059248132cce80202ff84a5315a31776afffc0b32186a00187 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94b52422350e63059248132cce80202ff84a5315a31776afffc0b32186a00187
Size

120KB
MD5

8e0d4e6ce69593ecdf315ceabde75001
SHA1

f90422544560102df4be13921cd435c8d2782205
SHA256

94b52422350e63059248132cce80202ff84a5315a31776afffc0b32186a00187
SHA512

f99d5ea03cdf115301d75bba8e6ca48d52f1ad716453b6afe9099dc65170714386e0a24b5a2e50b619ad60baf7aed00489c2141e38c0cff1409fe79754548aad
SSDEEP

1536:13L2Y/cj6RnHUNHPZMhetMuC3/UOcAvlvrd3V7NCsZ355qpqaQKw+B1O6Bcd:13KGcM0Ueny1IsZ355qFF1Bm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b52422350e63059248132cce80202ff84a5315a31776afffc0b32186a00187

Files

94b52422350e63059248132cce80202ff84a5315a31776afffc0b32186a00187
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ