a565dd15cd791c2bf1eb9f1f5670b6b0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a565dd15cd791c2bf1eb9f1f5670b6b0N
Size

120KB
MD5

a565dd15cd791c2bf1eb9f1f5670b6b0
SHA1

ee31b8267458475d4343cbc1f9a0c25948c8167c
SHA256

89f1ea04904ba5550bb04cde4bc3074701594cd8ab048282e6c8718d5db1ac85
SHA512

0eb9a14877ba87258b7ea26d17befed90a488f017f0f4fc3a2cb78ff5c17c7969c9bda7fcceb293b5ca80ed8981fc02a074b319b930323dd00e09f8e7f7a9fd4
SSDEEP

1536:xcMNC2WWGss7gxcmeBpTKhYVUC5ClXHFFOFZyb2i0DO2UxyzmDvK3g9eZMl6QF:bXZs7MchpTK2uCEgFwb4DOhxyKIClXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a565dd15cd791c2bf1eb9f1f5670b6b0N

Files

a565dd15cd791c2bf1eb9f1f5670b6b0N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ