eec86b95cd4c5999d158b968f17dcb40N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eec86b95cd4c5999d158b968f17dcb40N
Size

120KB
MD5

eec86b95cd4c5999d158b968f17dcb40
SHA1

821baeab2f4415fe5f6c19f781e2e83dbb978c5f
SHA256

779ae27f115265d9aec943b8be59aff9556ec20f0a09c20cf551b78081ac0ec2
SHA512

725ec9bce85ae42790394c607080c90839ae9ac26c9497e2d38823b9281c6838aaecc7703de2db5941cc5346e42ae5425eda0c8f59fce793619355274487ce72
SSDEEP

3072:7vvi+Vy8N9mRU2K5ZdtraffjGhvQO78zYMRiNhhPSM3:ji+VARU2UdE3ihQO78z7mhq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec86b95cd4c5999d158b968f17dcb40N

Files

eec86b95cd4c5999d158b968f17dcb40N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ