dc015de0b7ee3baafe8153890904ee3fd8d215db51d4512e6a0076522516ac3e | Triage

Sharing

General

Target

dc015de0b7ee3baafe8153890904ee3fd8d215db51d4512e6a0076522516ac3e
Size

120KB
MD5

b87cf062403fb3a1a1bb18d1cca0f429
SHA1

559c513231d73381c2b99cceb5eb2897322fda38
SHA256

dc015de0b7ee3baafe8153890904ee3fd8d215db51d4512e6a0076522516ac3e
SHA512

a14bea22b54af48ea20620bfc1c7074cc91c3b466678a513e454cfa9a40e7e7164ba9225364bf5667ed7a09c86d8e6f4344d31174805e3263e9cb407a7296336
SSDEEP

1536:XNWxYGMcjiDV4n3tEs2oqWvndv2gqwfvXUWyRjV18RtpXW/+d1ITkQZj3fuoJeM:XKYGXOC9/PqodAwkWoP8RfXO+LIT9Df

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc015de0b7ee3baafe8153890904ee3fd8d215db51d4512e6a0076522516ac3e

Files

dc015de0b7ee3baafe8153890904ee3fd8d215db51d4512e6a0076522516ac3e
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ