08a630833429d4095f692f1e387aec80 | Triage

Sharing

General

Target

08a630833429d4095f692f1e387aec80
Size

56KB
MD5

08a630833429d4095f692f1e387aec80
SHA1

479ce0a1a82967f33d166b182e28e05183793f57
SHA256

3aaf3e9d26ef78d224ce1c9ceda481a6559ddafde3839a5009dd01d7a8b9d05a
SHA512

cbab3cf6fcb86dfe016870d0024d7fd1096bc29090b1ddd287d92d3fd7bb0bea8ca84217c66fad3c961580552baccd68046f053693d0e63a68f232f92c1a03af
SSDEEP

768:DYuc5y57q8ui4bPtdN6r9iXW9ofVj3+NTgxDhtoUWIf+GfLK+osmaZn:DYMGY4bFjm9oF3+Nq7oUW2+Mms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08a630833429d4095f692f1e387aec80

Files

08a630833429d4095f692f1e387aec80
.exe windows:4 windows x86 arch:x86

477be841711d2a2ae8e46f841f976930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindClose
TerminateThread
TlsGetValue
Sleep
IsBadStringPtrW
CloseHandle
GetModuleHandleA
PulseEvent
FindResourceA
GetACP
ReleaseMutex
LocalFree
LoadLibraryW
HeapCreate
SetLastError
lstrlen
CreateMutexA
GlobalUnlock
GetEnvironmentVariableA

user32

FillRect
DefWindowProcW
CheckRadioButton
GetDC
SetFocus
CopyRect
DrawEdge
GetIconInfo
GetDlgItem
DrawMenuBar
DispatchMessageA
CallWindowProcA
IsWindow

msasn1

ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xtxbfuo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE