0fb8e3f7c3bcbeed943114228df5fba0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb8e3f7c3bcbeed943114228df5fba0
Size

232KB
MD5

0fb8e3f7c3bcbeed943114228df5fba0
SHA1

9b19a4107009e5089e38af4f02e3604352765ca8
SHA256

e2597320e664eeea1e5d705e63b5ec3fa41b0e5e0d419620d9fef41ba585e1f6
SHA512

012ca45c596a67b614fe13628e3868af11cbfba24442ff57ae366bc79cb18e1145c6f80d34454f046e68842eb047586404477b44590589f0648721cea5ba103a
SSDEEP

6144:Y4HJIEFn6zDZ64eFwEfAdHzwUq7OaKM7rKJrE+o6Q:DG1Q4epaLqKNza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb8e3f7c3bcbeed943114228df5fba0

Files

0fb8e3f7c3bcbeed943114228df5fba0
.exe windows:5 windows x86 arch:x86

6a391c274ac3c925d2c756896b1210bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalMemoryStatusEx
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetExitCodeProcess
CreateMutexW
GetACP

user32

DrawIcon
IsZoomed
LoadIconW
SystemParametersInfoW
GetCursorPos
SetParent
GetWindowDC
wsprintfA
SetWindowPos
GetParent
SetRect
GetWindowRect
SetTimer
ShowWindow
LoadImageW
GetDC
ReleaseDC
FindWindowW
IsWindowEnabled
UpdateWindow
CallWindowProcW
KillTimer
GetActiveWindow
MessageBoxW
InvalidateRect
AppendMenuW
GetClientRect
PeekMessageW
TranslateMessage
EnableWindow
GetClassInfoW
PostMessageW
SendMessageW

odbc32

SQLGetTypeInfoW

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ