e44fad61a261704ca4bbaa51132daea5f16abd150cc30228e456cdc8f6ff1bb7 | Triage

Sharing

General

Target

e44fad61a261704ca4bbaa51132daea5f16abd150cc30228e456cdc8f6ff1bb7
Size

120KB
MD5

64f6167b0be2b748f8dcf21cf5514439
SHA1

e697e1992253aad17de96afcf400dcfbe3714417
SHA256

e44fad61a261704ca4bbaa51132daea5f16abd150cc30228e456cdc8f6ff1bb7
SHA512

57ca9b276c995fb145c7863db8a199ae3a7c7e7c030c03deee71b189dafaa140d3673b15924491eb7804f0dbae622b1dd0620f3df4207709036162c7c7226840
SSDEEP

3072:2y7Kqr6h5SD4k23QUEmEpiyFkVcQR+F0Us7OXUo:2yvr6vqiwCVcQR+F3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e44fad61a261704ca4bbaa51132daea5f16abd150cc30228e456cdc8f6ff1bb7

Files

e44fad61a261704ca4bbaa51132daea5f16abd150cc30228e456cdc8f6ff1bb7
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ