fb6909659f4d4159abb8611080f4c7ef0c4e92ce3c3f5d68aa94f4bab728065b | Triage

Sharing

General

Target

fb6909659f4d4159abb8611080f4c7ef0c4e92ce3c3f5d68aa94f4bab728065b
Size

120KB
MD5

d7485e1c2d377c4bbe037f2ab8c4cfb4
SHA1

6bcd6a3a43301da814af903174588ceaf363485c
SHA256

fb6909659f4d4159abb8611080f4c7ef0c4e92ce3c3f5d68aa94f4bab728065b
SHA512

edb4955db9d460f881cc4ddd75d09bb5257ba57c761bb364d68242e664a4563fdc6bc26b008a920e4aa02487b4ddcd32041e7a3054f44bb3551a6706c07e36da
SSDEEP

3072:qfFChNB3tS7BQUYCM9IVYCbVoQO5HFs1YNt:qfohNB3tkQQOMYCb5iy1YN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6909659f4d4159abb8611080f4c7ef0c4e92ce3c3f5d68aa94f4bab728065b

Files

fb6909659f4d4159abb8611080f4c7ef0c4e92ce3c3f5d68aa94f4bab728065b
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ