92ed1edb1142b2629c8a96036d646909ccb897a782ccad7f8353cc11b728cb86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92ed1edb1142b2629c8a96036d646909ccb897a782ccad7f8353cc11b728cb86
Size

120KB
MD5

c07c4ff653ba1be611aa1a50847a9d8b
SHA1

7f2ed4a8ff26eb4e1fdc3c5fc7ecf0408fada22a
SHA256

92ed1edb1142b2629c8a96036d646909ccb897a782ccad7f8353cc11b728cb86
SHA512

707a058ab0ca10310b7bfe8acba7c3670c65a04971dd8c2711121f31ffa5a6561f96c6adcfe427666f551ae70e28761223df41175557f9147b9a3d6e363e55ee
SSDEEP

3072:cYJUeG0KzNchsGLkQj/8IWTKner8K/Xg9l:xU6KzNcL7/8JKer8Qg9l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92ed1edb1142b2629c8a96036d646909ccb897a782ccad7f8353cc11b728cb86

Files

92ed1edb1142b2629c8a96036d646909ccb897a782ccad7f8353cc11b728cb86
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ