67bf475f5378ea1541920ca69577ead8cc98e3fbbf35f66ab773d86b0053df6b | Triage

Sharing

General

Target

67bf475f5378ea1541920ca69577ead8cc98e3fbbf35f66ab773d86b0053df6b
Size

120KB
MD5

597dc6eacd74e8dc1cb880a07cd42976
SHA1

04ef206eb9535b92d352aa0f83f64d8f49bab780
SHA256

67bf475f5378ea1541920ca69577ead8cc98e3fbbf35f66ab773d86b0053df6b
SHA512

bea89e33297877fe2fc0f9853a4e1299cc8289c09ae9cdd5338941d70c26c0f0b355710cf42091c156841610ced1d1ebe20aaf058b4f46d22ead735a02ff31fb
SSDEEP

1536:UJGGUHrMT6FJEZVgxyXqqowvgJRDxLD5WhEfiAvgxVhsAKlis6YTO0l+w/UoiWY1:HDmPXPvkD1IEfYxVh9QpT3lN/PSEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bf475f5378ea1541920ca69577ead8cc98e3fbbf35f66ab773d86b0053df6b

Files

67bf475f5378ea1541920ca69577ead8cc98e3fbbf35f66ab773d86b0053df6b
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ