896db081a37007df5c9e1e52ecf29f6abb3d60d144e585fc94c89d088c2a890a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

896db081a37007df5c9e1e52ecf29f6abb3d60d144e585fc94c89d088c2a890a
Size

120KB
MD5

5496f6a3efde9033acd91c83ffe8089a
SHA1

89195710948ab7482ca4bc0e22eac7f273c21d6d
SHA256

896db081a37007df5c9e1e52ecf29f6abb3d60d144e585fc94c89d088c2a890a
SHA512

c5e87a1d6548cddd6c2b57c1c3b247739c6b1de4922e503cd5897b4196e47cea05c774998cbc902d7ea444da2e2aab13ea81ba0765deaf6bfea1b2116aa8a724
SSDEEP

1536:yolW06uAAl0LDJ8H1l6wiEt5SecCpgJUiF9qWoaRdKrfpZ1aXV+QO7:yDu/GE1l6wi85SecCXgpoaPKrftaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896db081a37007df5c9e1e52ecf29f6abb3d60d144e585fc94c89d088c2a890a

Files

896db081a37007df5c9e1e52ecf29f6abb3d60d144e585fc94c89d088c2a890a
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ