0d2faf90c8282cfcb62a04b8f039c6b2 | Triage

Sharing

General

Target

0d2faf90c8282cfcb62a04b8f039c6b2
Size

45KB
MD5

0d2faf90c8282cfcb62a04b8f039c6b2
SHA1

e012bf1613a32a756a2e485631826ca8ea5cddcf
SHA256

73911a0684715be50ef049a322392e859abd9feda9ccf2f0ec5166d350ffa19f
SHA512

bc18a33351052d7b7a19a9f8520196bad23c15888d71c4930fff23f5ce65075149b082e52a9d4aa7977a6f5e394ace670b01659df80cf0bc0372f6c2b89fff12
SSDEEP

384:Yzipp6r++beg0hkqaJW+1ogoF4ZU0Z1i1kp5kMINqbjOGqCRv:Y82+2nPD1VZBniOp5DVbjFqKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d2faf90c8282cfcb62a04b8f039c6b2

Files

0d2faf90c8282cfcb62a04b8f039c6b2
.exe windows:4 windows x86 arch:x86

aad06cd6a5371eda2af28a0aebfe9cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetExitCodeProcess
FindResourceA
CloseHandle
DeleteAtom
lstrlenW
CreateFileA
LoadLibraryExW
CreateMutexA
GlobalFree
GlobalUnlock
VirtualQuery
ReleaseMutex
GetCurrentThreadId
SetLastError
HeapCreate
SetEnvironmentVariableA
GetModuleHandleA
GetStdHandle
GetPriorityClass

user32

GetIconInfo
CreateWindowExA
FillRect
CheckRadioButton
CreateMenu
DispatchMessageA
SetFocus
IsWindow
GetDlgItem
GetDC
CallWindowProcA
DrawEdge
DrawMenuBar

ntshrui

GetLocalPathFromNetResourceA
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE