0f44d122a873610988c0b81bef255008 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f44d122a873610988c0b81bef255008
Size

390KB
MD5

0f44d122a873610988c0b81bef255008
SHA1

29292bd7f7c72d57a8f10002e08bc9494ac1e0f4
SHA256

27dbd1bfbef53304c6fabb7db37e91e0a5a3ea14bf91e7ec8e5c77370c544f15
SHA512

55ace361db2e7474ce1c69ac619d28a6a7e31b4ad4a6c6a1ccc2086f7f4aa0a8fbca76bb8335cb3fb15ae904525f530f20df542e9b5f40ea9664907ab68705c0
SSDEEP

6144:sqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:eO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f44d122a873610988c0b81bef255008

Files

0f44d122a873610988c0b81bef255008
.exe windows:4 windows x86 arch:x86

20110c4736b8dd97e2dc588b4995bf58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetCommandLineW
lstrlenA
GetTickCount
CreateFileA
GetSystemTime
FindVolumeClose
GetDiskFreeSpaceA
LocalFree
LocalUnlock
HeapCreate
SetLastError
CloseHandle
GetComputerNameA
CreateThread
LoadLibraryW
FormatMessageA
UnmapViewOfFile
ResetEvent

user32

GetDlgItem
GetDC
DrawMenuBar
CreateWindowExA
IsWindow
CheckRadioButton
DrawEdge
FillRect
CallWindowProcA
DrawStateA
GetComboBoxInfo
DispatchMessageA
SetFocus

advapi32

RegEnumValueA
RegDeleteKeyA
RegCloseKey
FreeSid
IsTokenUntrusted

hdwwiz.cpl

AddHardwareWizard

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ