b07ebd85b49782b3c80a7d579f37b4ad7ebe8d2aa63353cc8e084eb04137b0a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b07ebd85b49782b3c80a7d579f37b4ad7ebe8d2aa63353cc8e084eb04137b0a7
Size

120KB
MD5

e0267c23a5a1296ae0202dfeb6ac9895
SHA1

077ba77b6094810cd014c0812d806d1beb826b6b
SHA256

b07ebd85b49782b3c80a7d579f37b4ad7ebe8d2aa63353cc8e084eb04137b0a7
SHA512

6129b8588ef61995498949f2eec5fa1a350afb3da58e5d90795d4d1ef3873f5ecb02d8e30805ed9b857bcaa5150a8ba79e177165e997c0d59e4238b67e1ea9a9
SSDEEP

3072:pN7b15yfJWJctJmz6HMjHXfAmjoFgxuL:XTKwJyJmz6sj3vjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07ebd85b49782b3c80a7d579f37b4ad7ebe8d2aa63353cc8e084eb04137b0a7

Files

b07ebd85b49782b3c80a7d579f37b4ad7ebe8d2aa63353cc8e084eb04137b0a7
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ