0bf535578ca551daf40fb2c83d8fca76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf535578ca551daf40fb2c83d8fca76
Size

552KB
MD5

0bf535578ca551daf40fb2c83d8fca76
SHA1

ea72a7227fcc5713f8a6ff000c55381166e31cf5
SHA256

bdde6f6dea9347014dfffe43a98016538236592bbf12a78e5519971960b9b18b
SHA512

9f0dcccdeb058f2498db9896750684a6c74e0354808b5a5bda5c14b7d6c92eeb7da8b3a9432ea74fc1653370e2a52d840757edce56ca7a13a3222d52720e0c8c
SSDEEP

12288:RS6vI8u/yCBTEr2RkpzLBmeakBSj1pyD9a9CcUtS:RSmIFLACRkpFmeakBSjbaqTUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf535578ca551daf40fb2c83d8fca76

Files

0bf535578ca551daf40fb2c83d8fca76
.exe windows:4 windows x86 arch:x86

e9c3026604aec54004e4a6f0ffa64efe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 518KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE