0af1b4ebedea4bcdeebca05053e64882 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0af1b4ebedea4bcdeebca05053e64882
Size

40KB
MD5

0af1b4ebedea4bcdeebca05053e64882
SHA1

2ac7ee8bba543dde3fa34b1466eba5e5b16e8431
SHA256

bdd4aa76b2fe859f4a0172fc02b12a8305b4ba991b29dec5a2804a7d73522f74
SHA512

224ba8854c4b6dd8ae311730379437006453d1b0cba76a18d6297d1045d90fb615b0534bc4859d4f1bccb46252e9c9a112040d2e49a890763bb5f6285bf13aa4
SSDEEP

768:Ytsz4TiKW6xpfYGBSGNc1iht5gxoOV0Saa/yc7W81FiwOicCeD9:NfwpfjFNK4t6eOJqc7W81FiD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af1b4ebedea4bcdeebca05053e64882

Files

0af1b4ebedea4bcdeebca05053e64882
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE