bb250ebf5afdd21933f060872a22654103ec62db7d9302ad5ed88273977841c2N | Triage

Sharing

General

Target

bb250ebf5afdd21933f060872a22654103ec62db7d9302ad5ed88273977841c2N
Size

120KB
MD5

424bac2097d6d302a2da26350f7d0b70
SHA1

6f27bf1585e005132c79a18e7fe6287315e9ee10
SHA256

bb250ebf5afdd21933f060872a22654103ec62db7d9302ad5ed88273977841c2
SHA512

daedc5da2585a3ab21098a1eaec1a8226b4fcb01b55848b7ae21846fc1055b0f116a0b74f03b92d872d83991bf8deaed05abd729b8b0d748f13eb3cce8562d88
SSDEEP

3072:xR/8+2W/SU3xaLSXLmbnXyhORoIEnYuiBZggIt6n3:r/8+TSmxoSXaDihORoIERiBZvo6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb250ebf5afdd21933f060872a22654103ec62db7d9302ad5ed88273977841c2N

Files

bb250ebf5afdd21933f060872a22654103ec62db7d9302ad5ed88273977841c2N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ