a0caacf0eaaaebb009e4727e2bedfbfb1a1a971c81b89a1103a10795571bbca6 | Triage

Sharing

General

Target

a0caacf0eaaaebb009e4727e2bedfbfb1a1a971c81b89a1103a10795571bbca6
Size

984KB
MD5

fd065a392490bbe9212b76a4a6c32d6d
SHA1

f4a31491d138d6ccf69b3135cd8006ae88f4f41c
SHA256

a0caacf0eaaaebb009e4727e2bedfbfb1a1a971c81b89a1103a10795571bbca6
SHA512

1153af13bf1a3ae91b2a4d929ab9b5b107b795a14fb60ef0c4bd232df305d20d75cbd12265a0899dc7130018aab61190e313f2365e57acc453ab8b68367831cf
SSDEEP

24576:0WNGbvgaOZnH57vKWQz4GcP1nktU1yns+ChpZ1cWNrwzL:lNYVuHwDpcPmtkFbFwH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0caacf0eaaaebb009e4727e2bedfbfb1a1a971c81b89a1103a10795571bbca6

Files

a0caacf0eaaaebb009e4727e2bedfbfb1a1a971c81b89a1103a10795571bbca6
.exe windows:4 windows x86

214d7feb36a5392124b7d5082745fc6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gui

Funtdy

mfc80

ord3946

msvcr80

?terminate@@YAXXZ

kernel32

GetLastError

user32

UnregisterHotKey

gdi32

SetTextColor

advapi32

RegQueryValueExA

shell32

SHGetPathFromIDListA

shlwapi

SHDeleteValueA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 56KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPdata
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ