f0e19cf2920fe1ad75d518bd15e8124805093bd279c31b76dd7fb6859174bd2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0e19cf2920fe1ad75d518bd15e8124805093bd279c31b76dd7fb6859174bd2c
Size

848KB
MD5

8cc5b965020b01afa93875348b7edd05
SHA1

9506e357ec80f327f303e6581663640885d6d92a
SHA256

f0e19cf2920fe1ad75d518bd15e8124805093bd279c31b76dd7fb6859174bd2c
SHA512

dcf58c00f3f5e416d47e2a111f8f552df73d05d5ed8c7062b92c15d86e0dd8a79b54290612083217a4bfb48e8507720ceea00a53d75a01ca9f96e18229991426
SSDEEP

24576:g+3M5VkOBh9B6ratZKnhYJ4YMI3sd/OWLvE/7QJq9WdFTp8+3:73MXF9ZDKnG5BT6s/kFdJp8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0e19cf2920fe1ad75d518bd15e8124805093bd279c31b76dd7fb6859174bd2c

Files

f0e19cf2920fe1ad75d518bd15e8124805093bd279c31b76dd7fb6859174bd2c
.exe windows:4 windows x86

038a6253830b58ec6d1e63bb214d6b0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle

user32

FindWindowA

wininet

InternetCloseHandle

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 32KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ