67a19c928a0edbfd43431c294f71c69f43378cf3e1f510486a771f5d9d63478fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67a19c928a0edbfd43431c294f71c69f43378cf3e1f510486a771f5d9d63478fN
Size

120KB
MD5

2495a106cf5a358d4758ef07bd389bb0
SHA1

7aaad64a3f8fb6e90e53eac6c84f2e8746f0e0b4
SHA256

67a19c928a0edbfd43431c294f71c69f43378cf3e1f510486a771f5d9d63478f
SHA512

cd9a3c874fd6a08c4031fe31281c7b05803b2a7641517a4cd6c841022109640277ae5fc92681e292df1783472b0b9e853b11ccf0b07157266df2565f80976ee8
SSDEEP

1536:boL5m2Q7q8dkOx3IM2EMLLTXZUK1bRytvP5lAnAtMzN+fZo72eO2rBh/I//NGMY:UZUVF3IbVLNZzyXJtMzAfHh2rBhw/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a19c928a0edbfd43431c294f71c69f43378cf3e1f510486a771f5d9d63478fN

Files

67a19c928a0edbfd43431c294f71c69f43378cf3e1f510486a771f5d9d63478fN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ