0c285186b6bbfb13646c99c0f545c132 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c285186b6bbfb13646c99c0f545c132
Size

928KB
MD5

0c285186b6bbfb13646c99c0f545c132
SHA1

fe2bafecc5334f3cf869312b54bb91cefdf2d999
SHA256

5c9be5c2a0a17c744c1c217a0330a4d5e9fec630b4f062e391d4592f58bbe277
SHA512

02296ffe37f35d369b4e25f011622f9dcc1c38b6181995ca21bbec4170045c8fd4ceef7569f10cd6ca904b79b562b706a66d2f1765d2fb9599e548af2108e9d0
SSDEEP

24576:v+V/YFZqhOBnVyK23C6OoYMLiVcKtVx4MiuzOhBAbvB:W1YFOOLWSor2VcKbxaYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c285186b6bbfb13646c99c0f545c132

Files

0c285186b6bbfb13646c99c0f545c132
.exe windows:4 windows x86 arch:x86

c9749513208288305099900ce01b1603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ