0be6a97928cad37f52d9de0243426740N | Triage

Sharing

General

Target

0be6a97928cad37f52d9de0243426740N
Size

120KB
MD5

0be6a97928cad37f52d9de0243426740
SHA1

f7d55083bef2296356392e5ce9e1845371a0e93a
SHA256

78e6a5c145f76a1f1e907c4d85dea904ae5dd9f1c5c9b7b982ce70e3487350f9
SHA512

807fa50d6fa19d66899ce937a8469420c5f325f03dcdfb10ea49271e316620d1363965e6279bfcefd2cc020f8dd9517a3879ec5d87ffe66025e49c9d2f760af7
SSDEEP

3072:5ResmHyqC1hAbxVK7eISumj5IAZsaa1mcgH/4EKZM:5ReRHnWWXKDSumdXW04EKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be6a97928cad37f52d9de0243426740N

Files

0be6a97928cad37f52d9de0243426740N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ