84fc0797fbeca98d5ac7fcb3c21bcfd0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84fc0797fbeca98d5ac7fcb3c21bcfd0N
Size

120KB
MD5

84fc0797fbeca98d5ac7fcb3c21bcfd0
SHA1

2f20680690d45821e1e1f3487c245fe9c3aa5a4e
SHA256

fe5e2869b6949d055fee81732ae104755d17802712b24607873cc31a19534ff1
SHA512

b98b172ac13d65b2c56b4ebc340c62cd2ae8c5fdc84bd59890ae650cea9e9ce8d1392f0b72c0b35b954a3bdb15520947c81a17e8043cdb62a4b9928c08ba4798
SSDEEP

3072:/XBQ+TvNwcFgGM6shJO83Bb2eC3/BC+L1E3Xvj:e+6R6shJjnCvDmnr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84fc0797fbeca98d5ac7fcb3c21bcfd0N

Files

84fc0797fbeca98d5ac7fcb3c21bcfd0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ