5299745fe100d78f1960e44381d9a4cd7b41ce2a96b9f55fa4424fb5f8b8c169 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5299745fe100d78f1960e44381d9a4cd7b41ce2a96b9f55fa4424fb5f8b8c169
Size

120KB
MD5

c8bd017087cb69dc31cb8bee6daee4eb
SHA1

d43bfc8322b424bc75ae6bf705d68bad5c5e49bd
SHA256

5299745fe100d78f1960e44381d9a4cd7b41ce2a96b9f55fa4424fb5f8b8c169
SHA512

2f4196c2de617bd9a98161be0a1618475ccdf05d8e3794cd19a0e7664a1eab47fdc6af060a04768d5f2a5f8c65be70de500a7540ca59fef31571ec9a4418a29a
SSDEEP

3072:kkmmSC+yhVPK2fJExZf0RC3VfEafKqWy:7mmSEEzHfONahWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5299745fe100d78f1960e44381d9a4cd7b41ce2a96b9f55fa4424fb5f8b8c169

Files

5299745fe100d78f1960e44381d9a4cd7b41ce2a96b9f55fa4424fb5f8b8c169
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ