2dd8ec288312929db667d3344ad07ff0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd8ec288312929db667d3344ad07ff0N
Size

120KB
MD5

2dd8ec288312929db667d3344ad07ff0
SHA1

411622019d9e52e79ea43c41bd3958fdbafed7c6
SHA256

9121dd482b7f797ecdc8deb847371227a57834d9bccb95907b10b25c79515a50
SHA512

2a5f7b62166998622247f70dae275b4d8e7ff90409719dbcaa5425a4847a0ab9a9ea14ab27a5a5d7fc728fae059686f6de7bdeb8c7c3f0d7f879079060f32681
SSDEEP

1536:enI0Krkil3b5rAYdC4OoU3p7u0HeZHPW9aS8Xo6j+sjulG9AJKKrk4/+C:F0KrkMAYcYKcHPiaT5kg9AJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd8ec288312929db667d3344ad07ff0N

Files

2dd8ec288312929db667d3344ad07ff0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ