bb406e9f34f54e6765019201e995fdd7e519b3767a99cfafc5e7f921cca920af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb406e9f34f54e6765019201e995fdd7e519b3767a99cfafc5e7f921cca920af
Size

120KB
MD5

eebbcdcaa4fed44d059c2438f3570d69
SHA1

999c63277f5df392901cb3992a5b664d5149a92a
SHA256

bb406e9f34f54e6765019201e995fdd7e519b3767a99cfafc5e7f921cca920af
SHA512

6f1641782547c46527e73498ef557673a96a9ec4c31dea398850342e8799cd5fda0d0320b1e6b74eceeb9dd36807205a31696a0c055b7880ebdcc7df2a37070a
SSDEEP

3072:gNHtVTQtaFpQ7CczJuAUuNYhYEFZYKrxJOh:gXVXFpQMSaYEFPtJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb406e9f34f54e6765019201e995fdd7e519b3767a99cfafc5e7f921cca920af

Files

bb406e9f34f54e6765019201e995fdd7e519b3767a99cfafc5e7f921cca920af
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ