0e74642514d9dee1ef49f26fa80fc3dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e74642514d9dee1ef49f26fa80fc3dd
Size

92KB
MD5

0e74642514d9dee1ef49f26fa80fc3dd
SHA1

007e036506d760445b5c45518d653ba5139dfe70
SHA256

38de7c6706f9af977ac3e8e261b6da0a46e6694acdfbb16b7c267092ce702992
SHA512

bb83de54c697b04ac3c3623b276c97a9594c462f32ccf30bc810f353e461cb2e33ec6625cc1aa26efb852cd5f40ea99a9f7b4234b237c1b6ef3159b611f0f5e5
SSDEEP

1536:PB3p5cwGT56haqtiv9vBFFH18IWuoab0L:p3p2wGTMhaqtiv9TX4uoabs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e74642514d9dee1ef49f26fa80fc3dd

Files

0e74642514d9dee1ef49f26fa80fc3dd
.exe windows:4 windows x86 arch:x86

bbf12bea27553f1d7451e2c8209f83f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
SetStdHandle
LCMapStringW
LCMapStringA
ReadFile
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle

user32

SetTimer
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
MessageBoxA

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ