0d79def09ffad5f217c742e7d15500fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d79def09ffad5f217c742e7d15500fb
Size

118KB
MD5

0d79def09ffad5f217c742e7d15500fb
SHA1

239a846a391a2f40df684b3c3a24bc70527f3977
SHA256

ddd9db97a3a87a8cfed7ebee42fe88748bc57708d45355cba6e45570f7029bcb
SHA512

c1e9ed494cd8a0f143c02876c7eb9e59fc162a05527bcb8027be2b5665cc861e284d0f6ec921339de557e666ea5f30362ff69bb4299fd48a45bd0ea2212e06ea
SSDEEP

1536:FzZ6ZMR9KVMAkwrwS9WqyM9QSOyAXtjNCrwlKQnDh998MYHTRzx3I5mJ6Tq+1y6:t9mkSkPM9QS7atjNCscXPHNxUmMTq+M6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d79def09ffad5f217c742e7d15500fb

Files

0d79def09ffad5f217c742e7d15500fb
.exe windows:4 windows x86 arch:x86

ea102a6c92db52adc357d42e011d09b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarCat

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ