dbb1f449a46e1446170161f5364db76440a0755a9ff2599e5f4abe848ad383dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbb1f449a46e1446170161f5364db76440a0755a9ff2599e5f4abe848ad383dd
Size

120KB
MD5

ba3f2a68ec1d2ad7c0c31a927aae8897
SHA1

065ba689b93d3f254da4722ff590eafd1e0274c9
SHA256

dbb1f449a46e1446170161f5364db76440a0755a9ff2599e5f4abe848ad383dd
SHA512

aa9f8551a6f61a2d7c96841f2d8dac958f9fc887c4cb0bbd3613595dc50b72e8038c2e08349938f62ca98781885282b419d11bbccded9686df2504c3018a113f
SSDEEP

1536:Y2GPSgUpMfB3LUWAyhLHjXqbBYOvurwZ+rZdxm8e9WAh2wKqh93LJAhpI1CxIYn1:JlCfB3/dLhauk8c8VAh++xL6pKCxI41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb1f449a46e1446170161f5364db76440a0755a9ff2599e5f4abe848ad383dd

Files

dbb1f449a46e1446170161f5364db76440a0755a9ff2599e5f4abe848ad383dd
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ