c0d5435e24fbb9dc9a2bf9902f9013ec4f0acec4b047e83def4067237b0f231e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d5435e24fbb9dc9a2bf9902f9013ec4f0acec4b047e83def4067237b0f231e
Size

1020KB
MD5

f92812ed1538b33d90aca43172c19437
SHA1

9460f6597625fb6031e66009689dc7ab4a63f8cb
SHA256

c0d5435e24fbb9dc9a2bf9902f9013ec4f0acec4b047e83def4067237b0f231e
SHA512

6e4ada5a4e1d5d092caeff139de084ce389a39ed304da4843648e78a9580b8e31576e39418b4f231493e4b3cb9371bb7c9543eabc17c4d05e53b7344876f3f5b
SSDEEP

24576:WmsvMZcznr1tD/pxPDN3kjqGcgbIKbaFgCh1J5ZQRsN:WwSpF0cS2+CPjZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d5435e24fbb9dc9a2bf9902f9013ec4f0acec4b047e83def4067237b0f231e

Files

c0d5435e24fbb9dc9a2bf9902f9013ec4f0acec4b047e83def4067237b0f231e
.exe windows:4 windows x86

006aa32705c27d3161b97b32dd7b3245

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 60KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ