db390d4ebbca244a2704bf0898953df7284c593678ce96fe0c23dd8ca0a85936 | Triage

Sharing

General

Target

db390d4ebbca244a2704bf0898953df7284c593678ce96fe0c23dd8ca0a85936
Size

120KB
MD5

2e30ac9c0b6f3bc56b3be9a201d2ee0a
SHA1

0b7aa2016915650f796fc538d981c9195744cad1
SHA256

db390d4ebbca244a2704bf0898953df7284c593678ce96fe0c23dd8ca0a85936
SHA512

81c32d01f628317dacbe1b5747505687ce5416bc51eb959d2215422e9023f68cf19b6b866563aeb306053c59c05a3dc95f08a28b4c1841b7915232dd70c93943
SSDEEP

3072:X0oOdPsX1e+EZNr5py8NDIl6blsG1ZKl0wM7:X0oOkXc+EZfp9N8sR11ZlwM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db390d4ebbca244a2704bf0898953df7284c593678ce96fe0c23dd8ca0a85936

Files

db390d4ebbca244a2704bf0898953df7284c593678ce96fe0c23dd8ca0a85936
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ