0eb1e556bdcf26f715fd89d536db911f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb1e556bdcf26f715fd89d536db911f
Size

86KB
MD5

0eb1e556bdcf26f715fd89d536db911f
SHA1

6a140825c3ac90340fd22acd6df46f5ec960fcc0
SHA256

19fc9fa10cdc20442905722baf480a2ae1af7f437f9857c37e45d4cfe0053d52
SHA512

6f33f051311e00a9dd14476910b040b253000c3f95121ecd01a16281130518764169b8326b124b2384d3556ebde0d6b2bbcf64387a25ac2e36ce4736148af4a0
SSDEEP

768:Q/IwI4gTtUReg/UXssPzfQE6rrDNswNX9pQUnbmhGOOOOOOOaHaJB4VQgvBAfBKb:/d4gTtUMgQzfWrrDNhLGKYBuOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb1e556bdcf26f715fd89d536db911f

Files

0eb1e556bdcf26f715fd89d536db911f
.exe windows:4 windows x86 arch:x86

570765a534b21835978454932943ebf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FindResourceW
GetComputerNameA
lstrlenA
UnmapViewOfFile
GetCurrentDirectoryA
CreateFileW
GetModuleHandleA
GetCommandLineA
PulseEvent
FindClose
LoadLibraryW
CloseHandle
CreateProcessA
Sleep
LocalFree
HeapCreate
lstrcpyA
GlobalUnlock
SetLastError

user32

CreateIcon
CheckRadioButton
DrawEdge
SetFocus
DispatchMessageA
CallWindowProcA
CreateWindowExA
GetCaretPos
GetDlgItem
DrawMenuBar
GetDC
FillRect
IsWindow

cryptui

WizardFree
CryptUIDlgSelectCA
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE