0da7d45645f7e25a0170d873bbf1c9a1 | Triage

Sharing

General

Target

0da7d45645f7e25a0170d873bbf1c9a1
Size

36KB
MD5

0da7d45645f7e25a0170d873bbf1c9a1
SHA1

b38d29039b8e13d7e9deb8d76aa5906c130008c9
SHA256

aaeaa9c6695bfe8e9da3777d6486ebd2807aab97d169d0cdcbed1bd08665aa5f
SHA512

1dc5bee63aae1e8880e1d9d983f11bfaa2757b2f62252b7a16ee63415fcc55cf76774e8ec4428b7435ce9774e6fb70037ca7bb549333377ea4a386abadca2551
SSDEEP

384:O9Ywb/pMk4nUZ+2jwiLNQCZqGCywkaAdOEulV:ONb/q94fNv2wacXulV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0da7d45645f7e25a0170d873bbf1c9a1

Files

0da7d45645f7e25a0170d873bbf1c9a1
.exe windows:4 windows x86 arch:x86

3de737560d80707fbf000766309e79f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetConsoleWindow
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetStringTypeW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE