b11745a630d62e87ba3ff2c75b884da4cd885112afc1de3ca9ddc33f31874180 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b11745a630d62e87ba3ff2c75b884da4cd885112afc1de3ca9ddc33f31874180
Size

120KB
MD5

924b725b048226b4ea12761c070a32c9
SHA1

9a20285e42bebe4fb5029afaff2c5a9bc59fa769
SHA256

b11745a630d62e87ba3ff2c75b884da4cd885112afc1de3ca9ddc33f31874180
SHA512

bd6c306ad0954ec9d9b4833fa3a918c23d9de8d401db1f0e8454e24d689c40488469596fc59bcd97ce7d2f1c0ee23f1c10c060180a70711e7c1b056051e5102a
SSDEEP

1536:jk3/Asc9NffLKQbsKT4pu4P/sqkmD7kqluNlvUNmEeW/gIbSB:jk389NnmQb0uY/saDQcuGmEe9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b11745a630d62e87ba3ff2c75b884da4cd885112afc1de3ca9ddc33f31874180

Files

b11745a630d62e87ba3ff2c75b884da4cd885112afc1de3ca9ddc33f31874180
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ