a8db1d129c65da982648c49033b2d47c7479f03c34fb0b337919d8163d5beff1 | Triage

Sharing

General

Target

a8db1d129c65da982648c49033b2d47c7479f03c34fb0b337919d8163d5beff1
Size

120KB
MD5

9aa74da878dc993ed35c649926877f2f
SHA1

58b633603baf82dbc43383dd4295aa87e7258d41
SHA256

a8db1d129c65da982648c49033b2d47c7479f03c34fb0b337919d8163d5beff1
SHA512

a8c4683e8116c204ef9b79cdc5049b8c489b488f71fad8adb5303204f935db336f5bae2abc44cdbf8feb077fe8bb4bc79c1cdb8e80e92fb9672e01274709e1fa
SSDEEP

1536:ScGQq51NFpraOv4RFq04/4JKsXCflTkUOZ5FFmArOl0R68tc:y51/gzXQ/Q0faJxpB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8db1d129c65da982648c49033b2d47c7479f03c34fb0b337919d8163d5beff1

Files

a8db1d129c65da982648c49033b2d47c7479f03c34fb0b337919d8163d5beff1
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ