adc3891899644cb089c2e2476240741f60e3da9e2bdc1bccb2cc67d4c0bf702f | Triage

Sharing

General

Target

adc3891899644cb089c2e2476240741f60e3da9e2bdc1bccb2cc67d4c0bf702f
Size

120KB
MD5

cd39d56a3fc8a94f852403d5c3b8703e
SHA1

cfa312338904a9553c8d0f1cb9c359f32618b37c
SHA256

adc3891899644cb089c2e2476240741f60e3da9e2bdc1bccb2cc67d4c0bf702f
SHA512

c77cf32c4a1de03156a7b0fbc34e3d9068d4d9d346963d997b67170e59d4db94aa2ec10a7f76131ffdd3f201a759bfed24f037d3729a2fd69713ae35fa6e9ed3
SSDEEP

3072:1JEtprZCIxBwhPDl1FR4V8d7syKllASU6tuH:1JEzghp1FbsptHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adc3891899644cb089c2e2476240741f60e3da9e2bdc1bccb2cc67d4c0bf702f

Files

adc3891899644cb089c2e2476240741f60e3da9e2bdc1bccb2cc67d4c0bf702f
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ