2ad156f8d569fb1d084e59b6fb67e14e8a0bcf42720790bf708d2c99afdad528 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad156f8d569fb1d084e59b6fb67e14e8a0bcf42720790bf708d2c99afdad528
Size

120KB
MD5

74c4ffa3c4c908909160402cf34476f3
SHA1

981bb2e9c6d148851f9884bafdeb518efda8f20d
SHA256

2ad156f8d569fb1d084e59b6fb67e14e8a0bcf42720790bf708d2c99afdad528
SHA512

fc235e054e3e2b967c599a9e9a096c3273d1667215e0e972180f922c14989019cd11915907030d97d0eb3de06700ac6a385aa56e3a2c74af97da55e9d913fe24
SSDEEP

3072:aNrAL33wqQVxE3a6+06CwUSHblPHqJkxUN:2ALRqxECCwJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad156f8d569fb1d084e59b6fb67e14e8a0bcf42720790bf708d2c99afdad528

Files

2ad156f8d569fb1d084e59b6fb67e14e8a0bcf42720790bf708d2c99afdad528
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ