0c129ac33c7e43006f99217d42d5b4169a9ece15915347c886596d9bf08c9b4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c129ac33c7e43006f99217d42d5b4169a9ece15915347c886596d9bf08c9b4f
Size

1.8MB
MD5

514a180ab08092874346d695c1140e9b
SHA1

59503aae4c2ae9eea6075f52adf813e128ad6195
SHA256

0c129ac33c7e43006f99217d42d5b4169a9ece15915347c886596d9bf08c9b4f
SHA512

fc73038d63a8d096bf6b02a48b5ff0c381c14aa79bd65ab79ed66d1e4aa8c5a28e3bc6e0d33599f8119414dfc60f129b080981e8e9f388f6070fdd0478bdf47f
SSDEEP

49152:SW08s371MHpf7/LXFXEHEShzsxY1KVMaplcn1nhD:SWS+pT/LhEHESF11KLKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c129ac33c7e43006f99217d42d5b4169a9ece15915347c886596d9bf08c9b4f

Files

0c129ac33c7e43006f99217d42d5b4169a9ece15915347c886596d9bf08c9b4f
.exe windows:4 windows x86

54f98cd45f7923d2d62c8016ba4c1970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile

user32

GetScrollPos

gdi32

CreatePalette

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

socket

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 776KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ