0b8fa5ea4708d0495d357a17221fde5eb577c3e7f2d4b2bf543e8d9891ae398bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b8fa5ea4708d0495d357a17221fde5eb577c3e7f2d4b2bf543e8d9891ae398bN
Size

120KB
MD5

5be0b340d1df827bcea3064bc6f9c7d0
SHA1

8cfa76db2af658ccad26bfbd48445dfbdc2e5295
SHA256

0b8fa5ea4708d0495d357a17221fde5eb577c3e7f2d4b2bf543e8d9891ae398b
SHA512

3462cf3dc98df676b40f9d1426e96e8954c56661d7e6dc6f3da7120252b5a041cfa435393ff75b5baf18a7e9420f4a26bf7a436e5e7d1f61ff0917ca4b661a1a
SSDEEP

3072:4PggR0nQL+MBK7HIBPBTN2uK/l2E/VRnMjh:GggR0cBK7uZTN29UE/VR2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8fa5ea4708d0495d357a17221fde5eb577c3e7f2d4b2bf543e8d9891ae398bN

Files

0b8fa5ea4708d0495d357a17221fde5eb577c3e7f2d4b2bf543e8d9891ae398bN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ