e601c13bf131c7d6e79596d05258c8e7d08174696afadc6de54e6d76d0ad4bf1N | Triage

Sharing

General

Target

e601c13bf131c7d6e79596d05258c8e7d08174696afadc6de54e6d76d0ad4bf1N
Size

120KB
MD5

2f158506577b40636dc471a1601f2b40
SHA1

65a39d1ff99ec35b4e1b495f92ce15dd96e039fb
SHA256

e601c13bf131c7d6e79596d05258c8e7d08174696afadc6de54e6d76d0ad4bf1
SHA512

3d104ad8d331a53c7cf4adae5ddfa174226d26370e07a502505f555db1ca109e26984e54e5c7764bfae5cccf83e300fbc75c1107093e9b5c5b659676b0d6ac2d
SSDEEP

3072:ljust0p/R4buUPuwlRSMZuIlw6Dr7FLHYwS7Wp7Y9mRxFHl:pTt0nauUPSM0o1DVbGGFHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e601c13bf131c7d6e79596d05258c8e7d08174696afadc6de54e6d76d0ad4bf1N

Files

e601c13bf131c7d6e79596d05258c8e7d08174696afadc6de54e6d76d0ad4bf1N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ