f00b2d2d09fe49949de8124d5cdfc37cde71e7f1ad9a2a6a1eb79a18350c57f4 | Triage

Sharing

General

Target

f00b2d2d09fe49949de8124d5cdfc37cde71e7f1ad9a2a6a1eb79a18350c57f4
Size

120KB
MD5

0377d1e4243d8eb5cdbcfd6ee02db0dc
SHA1

412d7258957782e23f95a3906d651adfc2cca90d
SHA256

f00b2d2d09fe49949de8124d5cdfc37cde71e7f1ad9a2a6a1eb79a18350c57f4
SHA512

1f3c9518bd697a56f4f36d1849977a54e68c519463133d1005b3dc0c18487a3ea916048a32095e5d8d439e2fb14db522f65a38c4704ea6c5de6a5fe8dde9fed0
SSDEEP

1536:HpGmleHJo1/OHCy/qrBrXovssgYEaYm2yXiHwRypxoO0Qb/8t9:wrprHl/8rXovXgxaYmncXipQQ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00b2d2d09fe49949de8124d5cdfc37cde71e7f1ad9a2a6a1eb79a18350c57f4

Files

f00b2d2d09fe49949de8124d5cdfc37cde71e7f1ad9a2a6a1eb79a18350c57f4
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ