0f3536663b58e2245f4f82289ca4ed2d | Triage

Sharing

General

Target

0f3536663b58e2245f4f82289ca4ed2d
Size

158KB
MD5

0f3536663b58e2245f4f82289ca4ed2d
SHA1

379b88c68d4d1d34b641948c7c70f227f739850a
SHA256

e0209ff291d046acf6be2b9b25f0a8e8deff4cb75307b91bd7a1182d8cf5fd87
SHA512

aedbf85b8e0084b06b90a1083b443800416c2dd731e12ebb331f7d152875305723e92f61a1f5a0b784992c3ede795f609bf2496d54be319c2c4171d6b201dff5
SSDEEP

3072:jqDwMmDBZuBTX20eMgX/IWGGCHZYuALmHmtemvd+X:DMm3uBTWX/sG+YrpeUwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3536663b58e2245f4f82289ca4ed2d

Files

0f3536663b58e2245f4f82289ca4ed2d
.exe windows:5 windows x86 arch:x86

89358b6d4adc2de0622b53b7c47e2ccd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadFileEx
GetProcAddress
GetModuleHandleW
SetPriorityClass
ExitProcess

Sections

9999
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.8479
Size: 1024B - Virtual size: 525B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4879
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

3333
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5555
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE