35967415c1378e38a5f42758b2a6efbf25da69441b991b557599f21fcb2ce0b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35967415c1378e38a5f42758b2a6efbf25da69441b991b557599f21fcb2ce0b2
Size

120KB
MD5

cc4299baa0969e41d1549fa9ab180edb
SHA1

ea3b029491cab9b86fe00d583012b802247a34d2
SHA256

35967415c1378e38a5f42758b2a6efbf25da69441b991b557599f21fcb2ce0b2
SHA512

c4125d2b0edf99e84fb16822548a10cf47d08baf7a17b0604d0fd57ad6cf9da6c1b09a936d5b56481accba38ea33a17fd07f88c787cc0bd15d362cc495020cea
SSDEEP

3072:J5Nip2Mx+O7vtpfaMrXRRHvCNp1YS5Utm+m59esE:J5Ex+offHvSpwDG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35967415c1378e38a5f42758b2a6efbf25da69441b991b557599f21fcb2ce0b2

Files

35967415c1378e38a5f42758b2a6efbf25da69441b991b557599f21fcb2ce0b2
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ