2f99d8d12a3422530b41ce98dd502b2d57574dc2e66dc6e2d829a7f1aca56726 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f99d8d12a3422530b41ce98dd502b2d57574dc2e66dc6e2d829a7f1aca56726
Size

120KB
MD5

419ac597ee4bc29f949fca5ff966ddd9
SHA1

4c66751d5020c23f9cbfc678eeb4b9f827f21a5f
SHA256

2f99d8d12a3422530b41ce98dd502b2d57574dc2e66dc6e2d829a7f1aca56726
SHA512

5d503eb58f8c2537ce0f1932dec81d84ed4b68da5e98776d35d8c8962f6e0499a8275dbf9d34a02232933e4ebd84aea64fb9f754c7733bdf7017b76295affcc9
SSDEEP

3072:TOj0L1sgKtAhTyh+AT48gh0nR77hE+D83aeEu6ey:N2gKtuyh+F8oKthTDRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f99d8d12a3422530b41ce98dd502b2d57574dc2e66dc6e2d829a7f1aca56726

Files

2f99d8d12a3422530b41ce98dd502b2d57574dc2e66dc6e2d829a7f1aca56726
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ