64ff68b620e0f0ebcbfef77e5aba15a0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ff68b620e0f0ebcbfef77e5aba15a0N
Size

120KB
MD5

64ff68b620e0f0ebcbfef77e5aba15a0
SHA1

d7ccf8e6800f29cefa352759356326262724f4dc
SHA256

736a3692702b471de2bb6a36b6bca9c99b7d4794101497b1898015317dc42e4b
SHA512

27beb77691cd0333b620445f493573a0e65180249b27c95864c2e01467be69b2613e781e1371ef660220aaf66a5ea863a2a8121e7e3f88b3e707e13c1cffe3d5
SSDEEP

3072:qZFRn4Ap9nOKE4zNkd8uVb1n2Tf6HTNL9gLBa8xXbbJHTY:qZrnNOKhc8gpxz7AJHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ff68b620e0f0ebcbfef77e5aba15a0N

Files

64ff68b620e0f0ebcbfef77e5aba15a0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ