0a49a63856d23bd2f0621030be2ffa64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a49a63856d23bd2f0621030be2ffa64
Size

330KB
MD5

0a49a63856d23bd2f0621030be2ffa64
SHA1

14edfabd85d05a3734535d85660b80e9531bbcf6
SHA256

22b8803ffe9a3737fc38beb5b4442b881ad86451470b39cd14f50450d85be78e
SHA512

e25a57dff1bc5f9ba8b35fdab667774dc1fe97bf50f7d78cb9de4924e5e8cb50ef5b4abf5a4f444db24cebb26c3d1ec51c01478065b37ca5258abc5bcbb5afa1
SSDEEP

6144:xaDJP7Ox6bECK+cys7V8q0kuy2I5Zcy6wL+27wM7M88DIxxEblMW:GNyx6bECK+zs76mFuyRSvlr8whMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a49a63856d23bd2f0621030be2ffa64

Files

0a49a63856d23bd2f0621030be2ffa64
.exe windows:4 windows x86 arch:x86

1f9b9649c412a8433a01f81131fb42a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetSystemDefaultLCID
CreateSemaphoreA
GetProcAddress
LocalHandle
LocalFree
LocalLock
GetACP
GetLastError
VirtualAlloc
TlsGetValue
LocalReAlloc
TlsSetValue
GetModuleHandleA
GetStartupInfoA

secur32

FreeCredentialsHandle
QueryCredentialsAttributesA
InitializeSecurityContextA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
MakeSignature
EncryptMessage
ExportSecurityContext
AcceptSecurityContext
CompleteAuthToken

netapi32

NetGetJoinableOUs
NetGroupAdd
NetGetJoinInformation
NetAuditClear
NetGroupAddUser
NetFileClose
NetGetDCName
Netbios
NetAuditWrite
NetConfigGetAll

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_acmdln
__setusermatherr
exit
__getmainargs
_XcptFilter
_exit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ