d14288b9ea693ff17af83f39cd34088a874d6dde6c154f80a5607183b2392b52N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d14288b9ea693ff17af83f39cd34088a874d6dde6c154f80a5607183b2392b52N
Size

120KB
MD5

2de960d145ac3d6568e3a0498ee64650
SHA1

e3dd6987336e5afac5666f5a050971a52cd549b0
SHA256

d14288b9ea693ff17af83f39cd34088a874d6dde6c154f80a5607183b2392b52
SHA512

73e0c1d6ec70c1e947578b2925ce3063a365fff6610ab5516542ae937d7ac6e5875aca9f5cbae9c179442de63b9404b5ff3e196f34d06112c7351230566c134c
SSDEEP

3072:ANHqCGt2KCXuTzdJ8Iob8suGcMTR5H6eO0:cWFQuTXSceV6d0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d14288b9ea693ff17af83f39cd34088a874d6dde6c154f80a5607183b2392b52N

Files

d14288b9ea693ff17af83f39cd34088a874d6dde6c154f80a5607183b2392b52N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ