b3bfa9223585da117a4e38e9a52dc3a70fbf4e8e8c3e088c21906c09ffb5766aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3bfa9223585da117a4e38e9a52dc3a70fbf4e8e8c3e088c21906c09ffb5766aN
Size

120KB
MD5

a4edb676c3c631e4fb4bb4047f5eeb10
SHA1

f08130ed0af6aa06681ce0d44de1f038e30ab1cc
SHA256

b3bfa9223585da117a4e38e9a52dc3a70fbf4e8e8c3e088c21906c09ffb5766a
SHA512

c06193e99964bde786ee9ca5f1e0d5dbc7a0fa4824353ceabc25d82df9a4e0e0dfb14e5110ef13211f4f84244c316de7d59a036da668aee795c1a80d23161deb
SSDEEP

3072:iaoKNzWqNsfyLkI3y1hYKMASH231DY4cS/Ro:iaoKN5SyQI3y1hYKMZ23i4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3bfa9223585da117a4e38e9a52dc3a70fbf4e8e8c3e088c21906c09ffb5766aN

Files

b3bfa9223585da117a4e38e9a52dc3a70fbf4e8e8c3e088c21906c09ffb5766aN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ