a54515861d547b42e20267be0604a427076f11ebec263dad2d26e1f583dd4ff9 | Triage

Sharing

General

Target

a54515861d547b42e20267be0604a427076f11ebec263dad2d26e1f583dd4ff9
Size

120KB
MD5

5a46b24b112b34d87ac87129b4108cb0
SHA1

7b5b664b4bd452be778baed0446a0fd493cb84fc
SHA256

a54515861d547b42e20267be0604a427076f11ebec263dad2d26e1f583dd4ff9
SHA512

174054a759941f7b688d6a43c4ff20df89480431e5bb3c63486794ea433ce50e74416ce8407841269a8d1e266ba1697fb17f59d811da303c61179a9848b117a1
SSDEEP

1536:YyJPYPv1ZRmrrpHGf2yTlr7f2Fi8Fc483F4NEcfa9+9Jcw7DCwdb8tXwr8S5h:YbP9mruxTlriFfFFOqN49+HcwawB86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a54515861d547b42e20267be0604a427076f11ebec263dad2d26e1f583dd4ff9

Files

a54515861d547b42e20267be0604a427076f11ebec263dad2d26e1f583dd4ff9
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ