737ab4dca7e6b31dd932b8f3d67013fbd91b8d5d5e6058957f46946d6d378cb2 | Triage

Sharing

General

Target

737ab4dca7e6b31dd932b8f3d67013fbd91b8d5d5e6058957f46946d6d378cb2
Size

120KB
MD5

1cf5ade975f33d292e8f70788fb26ee5
SHA1

d19d15886679cbcac57892f7de19513823ba3003
SHA256

737ab4dca7e6b31dd932b8f3d67013fbd91b8d5d5e6058957f46946d6d378cb2
SHA512

c5912f86ca6d160d5603299f14013fca421a61cac520c1fc979e0b497de9c4cd8387592ed03eb2f1e61f9d48e45baba6a95f6440cda7d23d00d59772a3c375f5
SSDEEP

1536:zqqfJej1q5C+tWjV38HDyS9Y51ONaJzR1ayDpsWedpdPWliHkODdTKRff:mo418CxiH8+Nax9vbODdm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737ab4dca7e6b31dd932b8f3d67013fbd91b8d5d5e6058957f46946d6d378cb2

Files

737ab4dca7e6b31dd932b8f3d67013fbd91b8d5d5e6058957f46946d6d378cb2
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ