de457b9a9a97f36876e10e53c083099ed6832d242042872a912c19284b01d722 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de457b9a9a97f36876e10e53c083099ed6832d242042872a912c19284b01d722
Size

120KB
MD5

e066b8eedd7c3044b155de88b25766ff
SHA1

7b317e849cdb34fc416d73c124b16083ccc590b8
SHA256

de457b9a9a97f36876e10e53c083099ed6832d242042872a912c19284b01d722
SHA512

00911ebd4030ebb25afcd791acf15fce62ad8e9420ca353f187d66fa067f41c860cf92c711586b5f4264c93787ac418621da9088b5376c607121d96dd1a11dee
SSDEEP

3072:3jjhL/ZNjCL7LGU6Olgl75E1qLsApAc5WNZaBha6:3XbNGL3GU/ONE1SDeaBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de457b9a9a97f36876e10e53c083099ed6832d242042872a912c19284b01d722

Files

de457b9a9a97f36876e10e53c083099ed6832d242042872a912c19284b01d722
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ