0d6c92e33f13f43d90c434d341cbe548 | Triage

Sharing

General

Target

0d6c92e33f13f43d90c434d341cbe548
Size

444KB
MD5

0d6c92e33f13f43d90c434d341cbe548
SHA1

bc86fa203959af575bdba10c1e27ca668c75c2ad
SHA256

d3470a7244bc38f275721cc74314c96e3ec7c23b34551c8a17972aee921f275e
SHA512

9c7e4365489f17fb9e63d110043a607e7ecaa4cf381651dc733b0cb62b03d4fe1166474e3a55990097c6dfe1399cb2abdbf52d2577731c63a66c43f5f6d3c306
SSDEEP

12288:Wiu7CjdtOz/jcX5qCbplmrtspNcgq67QW:Pu+jyjjM5qCbTmpsvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6c92e33f13f43d90c434d341cbe548

Files

0d6c92e33f13f43d90c434d341cbe548
.exe windows:4 windows x86 arch:x86

0ffed15c34f9ff1392094e3f71ab701b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarCyFromUI2

advapi32

GetTrusteeNameW

user32

GetDoubleClickTime
GetForegroundWindow
GetCapture

Sections

.text
Size: 440KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE