a70427f8ed34404704ec7fbadd4ad825e3ba3c3ac40746d32f236c4061a02b7cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a70427f8ed34404704ec7fbadd4ad825e3ba3c3ac40746d32f236c4061a02b7cN
Size

120KB
MD5

5004fc806696ced895d5bdb9ffa0e980
SHA1

a57122a52d0413e8e84e6e13a4b2572e4e1cbefb
SHA256

a70427f8ed34404704ec7fbadd4ad825e3ba3c3ac40746d32f236c4061a02b7c
SHA512

25d041722710a34c3d3ec6e58090cb3f9fa60e0db692e6ad2f681f2600a34616a8889cc476e30473fc0fa46ae5bfeb21086ac7c139f8ff3a1cd6f3d85c511ac7
SSDEEP

1536:oWrezwyoX9MqXB5OiDC+v8sKGR9TBlXQpGU1aFRU/GLXOcYKGxzaM15cIb:tjWAb8sbBlXQpGNWGrOcBGA4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a70427f8ed34404704ec7fbadd4ad825e3ba3c3ac40746d32f236c4061a02b7cN

Files

a70427f8ed34404704ec7fbadd4ad825e3ba3c3ac40746d32f236c4061a02b7cN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ