0bce075572adc55522b845cd51e61345 | Triage

Sharing

General

Target

0bce075572adc55522b845cd51e61345
Size

199KB
MD5

0bce075572adc55522b845cd51e61345
SHA1

674e5427a95256ffff49e3bf18cfa2cb9bdcdb6d
SHA256

bcf8e0c222798e7a38186ced10ce92b062dc11b06b476859ccba4e149a6689e2
SHA512

96f35077f5493fd6aa6acf231e905ead762649894f1e2119d5fba7afe480f5e76ec5ed0b9b6af6dd8195c84162e3b47a0712f55d46a1d98d5ccffce670a30c9f
SSDEEP

3072:ZRvudaAZA0TBOJyQezRVEASSnOZuq5qNt:/udNZt4JyzRVE8nSl5Et

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bce075572adc55522b845cd51e61345

Files

0bce075572adc55522b845cd51e61345
.exe windows:5 windows x86 arch:x86

d124f5c1260bca965e63a67650a5686f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueW
RegOpenKeyExW
RegQueryValueExA
RegDeleteKeyA

user32

CreateIcon
GetCursor

Sections

.jkke
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gdle
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldcg
Size: 134KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ekhig
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fabgb
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE