e089f803a0c4e085b25e73d57ed46244268ad1fb250ef22f546043db69e6eebf | Triage

Sharing

General

Target

e089f803a0c4e085b25e73d57ed46244268ad1fb250ef22f546043db69e6eebf
Size

120KB
MD5

36ef8d9f850799f6681b1b0f36d77b14
SHA1

9d63f151db59043bd89e9ccbdf486360bed57f54
SHA256

e089f803a0c4e085b25e73d57ed46244268ad1fb250ef22f546043db69e6eebf
SHA512

bf9de43a58afefc44d235c463887984b7cf168e3c986675eaf9ecb4e9ee7d9062b4ae8180f264e38e893a6a5ae421f90c25eed7f6cfca22f2f4f6b2b8db94a41
SSDEEP

3072:6jK8wjj91Rl/jBw79cA5A8q9kuP9jI4tQ:6Ozzb/twRcA5B2kuiL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e089f803a0c4e085b25e73d57ed46244268ad1fb250ef22f546043db69e6eebf

Files

e089f803a0c4e085b25e73d57ed46244268ad1fb250ef22f546043db69e6eebf
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ