febcd8138f67a483ee2d4260d7c234057b0484c8dbeb75f9b0f4cb860b455968 | Triage

Sharing

General

Target

febcd8138f67a483ee2d4260d7c234057b0484c8dbeb75f9b0f4cb860b455968
Size

120KB
MD5

14d2b16a6d49ed5d96116528c4865594
SHA1

9742f195152bbb7cf7ca2f6a992284063a5de029
SHA256

febcd8138f67a483ee2d4260d7c234057b0484c8dbeb75f9b0f4cb860b455968
SHA512

0066802fe1af5b233baedb0e6994b15c6daf9ab101182bfe6462be691a252ee048aea97d7ff024d3a59165a93381b69125f8a176f9581524a2eb99563c8471f4
SSDEEP

3072:TVg6/hhe2rY73TTSXgOk0p0S6JogmS6MbLOQ:u65BrYP6Y0p0tJodwnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
febcd8138f67a483ee2d4260d7c234057b0484c8dbeb75f9b0f4cb860b455968

Files

febcd8138f67a483ee2d4260d7c234057b0484c8dbeb75f9b0f4cb860b455968
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ