c42e22088d20b7c0e0bf8b30af1bb07ce7e4511d03b7528ca168fbf74ae80e0bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c42e22088d20b7c0e0bf8b30af1bb07ce7e4511d03b7528ca168fbf74ae80e0bN
Size

120KB
MD5

dc9a26ba20b564a3d0932cd87d7bdfc0
SHA1

914ba05125543a45c876c9a970f4ec2277e0d8e2
SHA256

c42e22088d20b7c0e0bf8b30af1bb07ce7e4511d03b7528ca168fbf74ae80e0b
SHA512

bff92c571a8ebdf9db05648bfb0eba74a04da962b5c585935f5b91a5ab4590c9fcdaca8db55b1ebf028c0460c302a65d928c9af2c59b192528252ea224c4575a
SSDEEP

3072:grgjRmOlC/mbPhZMb3sOK+QKIfdc/ZWgb+:WgjRmSC/6PrnlKIm/Yg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c42e22088d20b7c0e0bf8b30af1bb07ce7e4511d03b7528ca168fbf74ae80e0bN

Files

c42e22088d20b7c0e0bf8b30af1bb07ce7e4511d03b7528ca168fbf74ae80e0bN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ