384d041a8f5e99096dfb3b2b70ffe60af816e1ad97e0078015c0bb98c210ee06 | Triage

Sharing

General

Target

384d041a8f5e99096dfb3b2b70ffe60af816e1ad97e0078015c0bb98c210ee06
Size

120KB
MD5

8a84216e35fdae131363fc35d234481b
SHA1

d48a7f60350db0afbb6322fe8981dc360794766a
SHA256

384d041a8f5e99096dfb3b2b70ffe60af816e1ad97e0078015c0bb98c210ee06
SHA512

d57b587e6ce6649bd7c45e7e70eaa4a88275c9d837428f1d59430a003c60fcccf30d1866b0cff0eec4e6f8d5000b37942a3f87e5c6b3fb508fd9fe47d5d1b9b9
SSDEEP

3072:Wo6PYLJo1zXuE2KUphJ8abTX3wPph149ldJZg:ngf1Dcpca/UhGfJZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
384d041a8f5e99096dfb3b2b70ffe60af816e1ad97e0078015c0bb98c210ee06

Files

384d041a8f5e99096dfb3b2b70ffe60af816e1ad97e0078015c0bb98c210ee06
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ