ac245eb5d8dc120daef628acb89cbac71607ae9604f78598622a9d87278de158 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac245eb5d8dc120daef628acb89cbac71607ae9604f78598622a9d87278de158
Size

120KB
MD5

1bf914cf04cda00628dc3f6b642c4f01
SHA1

698ff71e84b50385b3c81618b2e24d5b6a9fc77a
SHA256

ac245eb5d8dc120daef628acb89cbac71607ae9604f78598622a9d87278de158
SHA512

3fa616e1e647be2e9b1d241cbad1d1c53b9dfd1af338fe425972bfb906a11cabcef0d05b9f3018f46fcd89372d40ec6aec11e6a357849df9b9374d029dff9138
SSDEEP

3072:9wCqRdKkbn5N1aPLjFr+zRFasC5dmR9zy5hu:9wHb1qLEFXjdy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac245eb5d8dc120daef628acb89cbac71607ae9604f78598622a9d87278de158

Files

ac245eb5d8dc120daef628acb89cbac71607ae9604f78598622a9d87278de158
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ