c9735c73b0bc215481b7e859036939c730c105c5b1cf2d4a94221a8ab2a558ba | Triage

Sharing

General

Target

c9735c73b0bc215481b7e859036939c730c105c5b1cf2d4a94221a8ab2a558ba
Size

120KB
MD5

c11b5d7620a61799eb4e0a5bed6c76e2
SHA1

0841887aa8c410ce72458f45ddfef9b36df43912
SHA256

c9735c73b0bc215481b7e859036939c730c105c5b1cf2d4a94221a8ab2a558ba
SHA512

2a5d7495cab155348b82927fea50e5bfb85aac7bdd66d031c516c338a4bc088ffdac19a2e1cee8acd057c589977a8841d86b7093c768e7d38b324f83580adad2
SSDEEP

3072:5HrX3XqDHdckNDSEt8sPnzhBYC/aWJ+q:5LwdckkEt8sP7YCCWUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9735c73b0bc215481b7e859036939c730c105c5b1cf2d4a94221a8ab2a558ba

Files

c9735c73b0bc215481b7e859036939c730c105c5b1cf2d4a94221a8ab2a558ba
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ