0d44120aac20e64cd874f51f52b1eb81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d44120aac20e64cd874f51f52b1eb81
Size

444KB
MD5

0d44120aac20e64cd874f51f52b1eb81
SHA1

27c4390c998890bb68bf78063045d3b10d4a6dfe
SHA256

efd1bfe5959e0526d3d4fd4a3ce7f766bd044c5d0d485d0097f03335ef8f7fcf
SHA512

c9b1284fe4be0492ea1f92ff36e8076d41410796272d9ad0ea266b16d53e04edbc6ae8bf499015a41b5f62fe20082df1722a812be381a504efbe1e2b5b2ac174
SSDEEP

12288:iHSMLwEgtNmuriql8hejQ3gMzzZ11qq4p5MuxNFjV:iODNdWqeQ+B/Zjx4rMuxNFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d44120aac20e64cd874f51f52b1eb81

Files

0d44120aac20e64cd874f51f52b1eb81
.exe windows:4 windows x86 arch:x86

b2d246deffca6af90660b8f2b3504dc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlpNotOwnerCriticalSection

advapi32

AddAce

kernel32

SetCommState
EnterCriticalSection
GetConsoleWindow

user32

GetMessageExtraInfo

Sections

.text
Size: 441KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE