baacc112d407cb45f8672435262dd2eed2c54b421acf6dc69da64db4a06d796eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baacc112d407cb45f8672435262dd2eed2c54b421acf6dc69da64db4a06d796eN
Size

120KB
MD5

1d947e3384d6b698ed62a3384d5a0450
SHA1

ecb35240b9ff7ce28693c850bfbf1ef302035189
SHA256

baacc112d407cb45f8672435262dd2eed2c54b421acf6dc69da64db4a06d796e
SHA512

eb16480272d2644d5b370459d04234ec458d78b18e9721b1c66c4d9a1f574fa6fedad8d4e5e575dadffd1d39964043e12f2c32544b95fa38fec864401edb7db4
SSDEEP

1536:UG9aOcO6Rxa+RVuBiNyFzELZTg6rgbVclC9JHSCl/vhx0ujQ/UTuQkvPeW8qXID:/ARUcYlqgbVclW5SqIuaZHxPID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baacc112d407cb45f8672435262dd2eed2c54b421acf6dc69da64db4a06d796eN

Files

baacc112d407cb45f8672435262dd2eed2c54b421acf6dc69da64db4a06d796eN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ