6870421bcc8e853389987438627c58dc5df87b64f87cb00bfef86b68c51699bbN | Triage

Sharing

General

Target

6870421bcc8e853389987438627c58dc5df87b64f87cb00bfef86b68c51699bbN
Size

120KB
MD5

50c92aaeebece7cdf21822f47415ae40
SHA1

e47c76646c3754008d3e23b2381976baae08b214
SHA256

6870421bcc8e853389987438627c58dc5df87b64f87cb00bfef86b68c51699bb
SHA512

f5dfb172af2c5a35206ca28037610b92f36006d3290edfd27f477b4b816bb42c517f96c659e8057e7c9a17046749cb210701901595a9fcba5319faac10d34b97
SSDEEP

3072:54itq4ncaALgkXJXUTNR3Ne99ZEVr5ql1/90WVvwmr:Gitq4c9sKMD0TZEVy1/90ivwmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6870421bcc8e853389987438627c58dc5df87b64f87cb00bfef86b68c51699bbN

Files

6870421bcc8e853389987438627c58dc5df87b64f87cb00bfef86b68c51699bbN
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ