8121edee937ebeb02f1ab5c67e0a52f22c4d0dc7a33b7a765d594f6290535f9d | Triage

Sharing

General

Target

8121edee937ebeb02f1ab5c67e0a52f22c4d0dc7a33b7a765d594f6290535f9d
Size

120KB
MD5

7d02eae10f6bf8a4b0acf68257c01b55
SHA1

a6101f067956881d067280589d9ee85cf59f8b73
SHA256

8121edee937ebeb02f1ab5c67e0a52f22c4d0dc7a33b7a765d594f6290535f9d
SHA512

28afbac3794f09ee536c43fec171533eb8272afad9871d3881829369686f907860b4cf47acd89fc221abb58c55683bfdbd2fc210c0e00a79a04e82cd5687aa9e
SSDEEP

3072:oDDOLrPp4/NDogsuBPkE2U1Xsb1+zNLKU/Ulz:oJ5oRgPkE24E+p2+Gz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8121edee937ebeb02f1ab5c67e0a52f22c4d0dc7a33b7a765d594f6290535f9d

Files

8121edee937ebeb02f1ab5c67e0a52f22c4d0dc7a33b7a765d594f6290535f9d
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ