0f67059843b85009ae46d7422af7208c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f67059843b85009ae46d7422af7208c
Size

696KB
MD5

0f67059843b85009ae46d7422af7208c
SHA1

5cabb7ce133622134395fbb72c844ff5763d2274
SHA256

423cfe185fa40c2055bc7bdc3e73e5501b060dca040b2dc2faa0ececdf236c67
SHA512

b20022d0336c0cd27c402c044e26f276be9bd1f6ea1ffe19134d86fb19da0edb533e91ba5690444378943d6a871f38ca9346ef0c4af74e84e6f63de9b94db161
SSDEEP

12288:Bk+50MnHGfnVhe/0EQzASLJcYQBSCBI/O0wvsBQuu41Ki0EDPpc4E:BkiDHyVhe/0EqASNcYRCxsBQtiNDpc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f67059843b85009ae46d7422af7208c

Files

0f67059843b85009ae46d7422af7208c
.exe windows:4 windows x86 arch:x86

1757ba99ded46101dfb71c9e27a4caa9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
??2@YAPAXI@Z
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
??3@YAXPAX@Z
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter

user32

CreateDialogParamA
LoadMenuA

kernel32

GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WaitForSingleObject
CreateThread
WriteProcessMemory
CloseHandle
SetThreadContext
FindResourceA
GetThreadContext
GetModuleHandleA
LockResource
VirtualAllocEx
GetProcAddress
GetLastError
GetStartupInfoA
CreateProcessA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ