851068b5a4ae6dcdc1135922ba646aa0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

851068b5a4ae6dcdc1135922ba646aa0N
Size

120KB
MD5

851068b5a4ae6dcdc1135922ba646aa0
SHA1

1d62ae73ff7c97d310f717f29469ee175a31d74b
SHA256

9fe473b355af9b65d075756f3708f04966bc9ad85a0448b5989f223a7284936c
SHA512

cbbc3f6984c36540465c6658645119a63b7206fca3c03a6f5696664abaa14ad8fd85fca1adc396ce607de0397fc6643ca2f347cf367e222aa194b6a4e0f082e0
SSDEEP

3072:1EVtT96K1oewCWPPff6SqBiXmZ5n3iqxj8cxF0Kg:+b96vewBPHf6SIiW3n3fxj8cAKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
851068b5a4ae6dcdc1135922ba646aa0N

Files

851068b5a4ae6dcdc1135922ba646aa0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ