c131fbfc41f91652c3d63b924c211e4e77754a6ae98c531c47b42939afe3b784 | Triage

Sharing

General

Target

c131fbfc41f91652c3d63b924c211e4e77754a6ae98c531c47b42939afe3b784
Size

120KB
MD5

1c914bbdd5fbd59287772848ac966e26
SHA1

a963c2d79ea3901097cc9c251dba1f0abfbd2cc5
SHA256

c131fbfc41f91652c3d63b924c211e4e77754a6ae98c531c47b42939afe3b784
SHA512

0a91a10df6e231dc0179eb397722dd9e367f923d080735a5e00af8ed56a6fca15d92c1e2adcc19e803d29b96489c0dfe8db0d2f4ac26b35033aa9d0900b05405
SSDEEP

1536:pLEWPWOYxZ6DJyZaysleKYYevcFQISR4Uk4HG2SCb1GhRl8Bvg+QewVGfl:pu6grsucCICNdHGAEhroYJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c131fbfc41f91652c3d63b924c211e4e77754a6ae98c531c47b42939afe3b784

Files

c131fbfc41f91652c3d63b924c211e4e77754a6ae98c531c47b42939afe3b784
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ