277959eab8e7f0d44006c1da13ccf1ae34097e79530d18d10e98f7dfcb45b8eaN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

277959eab8e7f0d44006c1da13ccf1ae34097e79530d18d10e98f7dfcb45b8eaN
Size

120KB
MD5

e718fc47924bbd42002b334041181b00
SHA1

0930b651bac692f37805f15669ca53713a6bbdba
SHA256

277959eab8e7f0d44006c1da13ccf1ae34097e79530d18d10e98f7dfcb45b8ea
SHA512

d80eb60bce4a656bfcf14e43688c15cb41b450c24b5a244f5beccabdd6c8842851f9e8af98e6f45f9becafe6bde4efbde6ae02ec86d39903f87f9c7a2888aa08
SSDEEP

3072:YksHZ3xR1lGqIOzVPTypQ4jigXiIUdstALw9:Y7HZhflG9Opypify5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277959eab8e7f0d44006c1da13ccf1ae34097e79530d18d10e98f7dfcb45b8eaN

Files

277959eab8e7f0d44006c1da13ccf1ae34097e79530d18d10e98f7dfcb45b8eaN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ