0a1b7f66d519f2b02383f3a2283a2c6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1b7f66d519f2b02383f3a2283a2c6e
Size

316KB
MD5

0a1b7f66d519f2b02383f3a2283a2c6e
SHA1

c8779c4066f8abe4ab6490acce953939a01b8f5b
SHA256

e54533405f5e3f69041c03e6ddd11adfa88de17dff6039875e971875f4762fef
SHA512

19f4cf37ce70a4a8d0a295793b03a3041f4fa5cb80384770d2e5819c1c455e242979584fe3f3441abf7d26f035ab0ba62429229ec092977b942481528a183139
SSDEEP

6144:vlrSHHHHHHHnvfCDD/e7tbGJN4IoXPzwbBZygJczR5jBNTkCs+sEXEA461pgZfym:vAHHHHHHHnOekQlXPzufcbnhNXEV2Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1b7f66d519f2b02383f3a2283a2c6e

Files

0a1b7f66d519f2b02383f3a2283a2c6e
.exe windows:4 windows x86 arch:x86

26dd17317b536d658baf4b5bafb81880

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
SetErrorMode
GlobalFree
GetStdHandle
FindFirstFileExA
GetLocaleInfoA
ReleaseMutex
EnterCriticalSection
SetEvent
Sleep
GetLastError
GetACP
GetSystemDirectoryA
VirtualProtect
InterlockedExchange
FindClose
RaiseException
RemoveDirectoryA
ResetEvent
GetCommandLineA
HeapCreate

user32

FlashWindowEx
GetWindowTextA
wsprintfA
GetCursorPos
SetActiveWindow
ReleaseDC
GetWindow
GetClassNameA
EndPaint
IsIconic
SetForegroundWindow
ValidateRgn
GetParent
BeginPaint
GetFocus
DrawTextA
FrameRect
ShowWindow
FillRect

dnsapi

DnsIsStatusRcode
DnsFree
DnsApiFree
DnsStatusString
DnsApiAlloc

clbcatq

CoRegCleanup

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ