607878a8b07410ca449f19fd75e9b9ed1feaaf46174f10d48f911832c3cddd0eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

607878a8b07410ca449f19fd75e9b9ed1feaaf46174f10d48f911832c3cddd0eN
Size

120KB
MD5

be4951af414c5a7ed34f0580fbdc4be0
SHA1

d0a103f805dbdf9068635890b6ac6f015d7fab97
SHA256

607878a8b07410ca449f19fd75e9b9ed1feaaf46174f10d48f911832c3cddd0e
SHA512

f26a9cc6df97907df025ba176d3d07af8963f188a45e42de8a7025bfb1034c400ca256c65ec4810b7dd7e73df8392980cf5799d061aba02bb0e00ad3836e55ae
SSDEEP

3072:6tZ0PQfxT8q1JeNaHpZL7FWyQBHQT+RY7Eb0HV:6cQfxHJeAkRHQTT7I0HV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
607878a8b07410ca449f19fd75e9b9ed1feaaf46174f10d48f911832c3cddd0eN

Files

607878a8b07410ca449f19fd75e9b9ed1feaaf46174f10d48f911832c3cddd0eN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ