b52b0bbb58836919f932b072429b988f797bd1dbca990c9d986b49db9dd2c5fe | Triage

Sharing

General

Target

b52b0bbb58836919f932b072429b988f797bd1dbca990c9d986b49db9dd2c5fe
Size

120KB
MD5

7cb949e49ec93bd0860a8fca517c6333
SHA1

cc025bd345fa2520bc7629f5959103ded86624ed
SHA256

b52b0bbb58836919f932b072429b988f797bd1dbca990c9d986b49db9dd2c5fe
SHA512

8fbf15373cd1d317b03bb7c284c2935f6f7bf0e0c9aafd0775c3d7bd1b91d4d11e3f1d4fd76b4d4bdc50761a78853728878a354d496c8e873bca4254dddb32fa
SSDEEP

1536:zG1U4xiIXaXliA/wRYRuPbxjSDFIinKU1sE2hE3gGV09bN1jhZhqyy0mXpVMGl:UUgP8PwO4ZShHxArjLu0msGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b52b0bbb58836919f932b072429b988f797bd1dbca990c9d986b49db9dd2c5fe

Files

b52b0bbb58836919f932b072429b988f797bd1dbca990c9d986b49db9dd2c5fe
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ