d6b096ef9634e6dc89f1945a0a082c8a61f5c617686624a3224ce52b1c479409N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b096ef9634e6dc89f1945a0a082c8a61f5c617686624a3224ce52b1c479409N
Size

120KB
MD5

06edde523f85cb797b3b9f97b27f4d40
SHA1

cf0ab48fb32a249f1b0e48bf56868c4592d62195
SHA256

d6b096ef9634e6dc89f1945a0a082c8a61f5c617686624a3224ce52b1c479409
SHA512

e072b49807e32c05defb2bbced536cd811f7409f169020379fd266c8f97f08cb9afa2b9458d71366c4afb181df0c020da8f4b51b43bdcc2e2ef7333b47331862
SSDEEP

3072:okVLDYHvWttavAG+sRhW1ZeGB2u9YE4Y:okAOLqAGFhWWg/uZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b096ef9634e6dc89f1945a0a082c8a61f5c617686624a3224ce52b1c479409N

Files

d6b096ef9634e6dc89f1945a0a082c8a61f5c617686624a3224ce52b1c479409N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ