deab1ac3d642fefb2c9bc83d6d6f4b812b3e04ed606c3668020e032ef9d3b4aaN | Triage

Sharing

General

Target

deab1ac3d642fefb2c9bc83d6d6f4b812b3e04ed606c3668020e032ef9d3b4aaN
Size

120KB
MD5

e9e63f16d1fb4f91a6d639c6f5dfa160
SHA1

c9e86b65f8c178203bc4912fe572edf5ff8a3197
SHA256

deab1ac3d642fefb2c9bc83d6d6f4b812b3e04ed606c3668020e032ef9d3b4aa
SHA512

24ef7ec1a40b3b528bd70dc33663771b4c4f5013700177f5893d2889df4114d7dac6f64606b5cdd48ff3a22119df94e5b1beefc4a72780b00d153d7f7bb1b968
SSDEEP

3072:lS3Sm7WJHS8KRWGRxGBpt0u/uUp6ypqeK:lUojKRWuxeuqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deab1ac3d642fefb2c9bc83d6d6f4b812b3e04ed606c3668020e032ef9d3b4aaN

Files

deab1ac3d642fefb2c9bc83d6d6f4b812b3e04ed606c3668020e032ef9d3b4aaN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ