b59ffc202223844d7d7a57c04a9834e30f19ec7f411100c21eceb554f206d992 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59ffc202223844d7d7a57c04a9834e30f19ec7f411100c21eceb554f206d992
Size

120KB
MD5

fe8f309bcc42e9f13ffa6980f73eb411
SHA1

0449c613d96dae6713862a66f3e05bc91a951d48
SHA256

b59ffc202223844d7d7a57c04a9834e30f19ec7f411100c21eceb554f206d992
SHA512

7c49ac50523c73dfbdb0b702a960f590c8c3b1260255005012c3aa008f89c7be0c8c41eb7377c2472c5324bb6de2991b15b1c9e29945e889f7a13a7e499ccfa9
SSDEEP

3072:SR6QrGgHgOj8kFoMdU5JAJwHOvCjbBHe6a0:SR6Qr/gSq0CjQ6a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59ffc202223844d7d7a57c04a9834e30f19ec7f411100c21eceb554f206d992

Files

b59ffc202223844d7d7a57c04a9834e30f19ec7f411100c21eceb554f206d992
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ