640db8d8f379c1b7748749878e5880a81be517e2291647b4435d1d9b58f482f4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

640db8d8f379c1b7748749878e5880a81be517e2291647b4435d1d9b58f482f4N
Size

120KB
MD5

88e986a33006e613349d0e88b585a820
SHA1

b89b0cbbf11a8345a95651f89bc867f53f0a69bc
SHA256

640db8d8f379c1b7748749878e5880a81be517e2291647b4435d1d9b58f482f4
SHA512

82187f0bf71bf831fe6a8e026d4e1576ebffe87b716279d032549309d551a641650e4cef4a984a28147b63dc86a940a21e5fb83fc13d80d05a4e384c3c88b4f8
SSDEEP

1536:SSOsvynTZ0d/AHhcvcftnG1sJkNtsBwQyC9DTgch9FDnDkHYky95g4wcVFaRU6Wk:NOHnTBXkXK513ggFDDkHF5wF85WsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
640db8d8f379c1b7748749878e5880a81be517e2291647b4435d1d9b58f482f4N

Files

640db8d8f379c1b7748749878e5880a81be517e2291647b4435d1d9b58f482f4N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ