0f931a83f59ae04a250aeb8d96e03bcb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f931a83f59ae04a250aeb8d96e03bcb
Size

755KB
MD5

0f931a83f59ae04a250aeb8d96e03bcb
SHA1

0782a6395314ac0059fecb0b160449cccb803c19
SHA256

4593cbef5465edf284d768b7b5e72f5f5618fff0264daadc10e1dfb2f102822d
SHA512

ac2ba484f84728107ce82e9b77a9640c5234aee59e5b6b31d84db3b54f8f6f7fc625bf6a7e7cd60282e81b42c2de9180e7b91f7398ab44b11d429c9f9e43c9a8
SSDEEP

12288:73KYYFi8iNPLdrHakx4mwaITqSFFFFXch0r52s0ds0/rCZFqoW2wcWillGyvI+x8:L95xr6kbRufFFFFXcu4dlrCWoXJNgyzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f931a83f59ae04a250aeb8d96e03bcb

Files

0f931a83f59ae04a250aeb8d96e03bcb
.exe windows:4 windows x86 arch:x86

48563a815fa7a9f9187110f4f080cc0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetStartupInfoA
RtlUnwind
GetLogicalDriveStringsW
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

__wgetmainargs
_initterm
memset
acos
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ