fb7282118bf95c6f655a820662d8bd2c15f206fdc6c53b7c0800f9c16ac11523N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb7282118bf95c6f655a820662d8bd2c15f206fdc6c53b7c0800f9c16ac11523N
Size

120KB
MD5

769867fe9080dae4f56848f091774010
SHA1

a847a50c5436eac40a1b2175f22cb7cad8ea2f0e
SHA256

fb7282118bf95c6f655a820662d8bd2c15f206fdc6c53b7c0800f9c16ac11523
SHA512

0eb898780faf449e932e51862143d00f9b92d8edc48d2fee76f7398dae8430b5890360a265b09f5de7284bb512721660c088af6920e3c8168a98acccf04d8aa1
SSDEEP

1536:2326rBR0FCbSoX6B3K82H39o9pnnsVteFhusK04UUMFPeWccfgeGavNJVLHM:sVR0FgF6loe9l6yNxpVKcfg6FJ9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7282118bf95c6f655a820662d8bd2c15f206fdc6c53b7c0800f9c16ac11523N

Files

fb7282118bf95c6f655a820662d8bd2c15f206fdc6c53b7c0800f9c16ac11523N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ