0e73d17e03e3bc324b7da7a383f5b594 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e73d17e03e3bc324b7da7a383f5b594
Size

164KB
MD5

0e73d17e03e3bc324b7da7a383f5b594
SHA1

1f2218b7c8911db1e0d2dafdfb84a6c62cfbd417
SHA256

8dc1ac7248eb803e480a3880c6ab83d9e4ffecce56eac83d23606e52aaf31910
SHA512

7a095349e33a7031d0330ab71236b688baab5b7c52d4f32ac18c1b11d76f748e5019514f1bf3b0d161311c361b1cdb63de29cca52e8228fd42f3fc2aeeb36ab1
SSDEEP

3072:4CgAC+yPGNcuc1Zg3V6U9GW+SmPI6WA+tA9Z+LbHM:4CgAqOxF9GW+SmPI64tAT+Xs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e73d17e03e3bc324b7da7a383f5b594

Files

0e73d17e03e3bc324b7da7a383f5b594
.exe .vbs windows:4 windows x86 arch:x86 polyglot

a47e465a5982c08f1ac8898a11ebf650

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
Sleep
GetProcAddress

user32

MessageBoxA

msvcrt

_except_handler3
_strnset
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strcat
strtok
memset
??2@YAPAXI@Z
strlen
??3@YAXPAX@Z
strcpy
strchr
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ