0c6abde64b185199a5a621faaca6a8a3 | Triage

Sharing

General

Target

0c6abde64b185199a5a621faaca6a8a3
Size

317KB
MD5

0c6abde64b185199a5a621faaca6a8a3
SHA1

97d81dc93fe67ed5394d7b15906425c3d8422c04
SHA256

e3937944af6aeba5b805718517af8ce5686b7a3b0e76488325bb9ff1418827c2
SHA512

90c49de4f2b0e7dc6b5980b22242f684ffea9efbf28edcc3efba8e76cdcf53e716e14e7c50fbe31146114eb80db728cfbbbd90e717c761437b4c0d10c0612a90
SSDEEP

6144:93tdpeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:93tonX5Hrlcnr6hDLstzzYSMaBOwUsRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6abde64b185199a5a621faaca6a8a3

Files

0c6abde64b185199a5a621faaca6a8a3
.exe windows:4 windows x86 arch:x86

ae855898f005d6a6903b7e2ab2935fe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
DeleteAtom
WriteProfileStringA
HeapCreate
GetLastError
CloseHandle
GlobalFree
LocalFree
GlobalAddAtomA
GlobalAddAtomA
GetStdHandle
VirtualProtect
lstrcpyA
LoadResource
EnterCriticalSection
IsBadCodePtr
GetOEMCP
FreeConsole
SetConsolePalette
RaiseException
GlobalUnlock

user32

BeginPaint
ReleaseDC
ValidateRect
GetParent
CloseWindow
GetClassNameA
GetActiveWindow
GetClassInfoExA
IsIconic
GetWindowTextA
EndPaint
DrawEdge
GetFocus
GetWindowTextLengthA
GetDC
AlignRects
GetWindow
ShowWindow
GetForegroundWindow

mprapi

MprAdminUserOpen
MprAdminUserClose
MprAdminUserWrite
MprAdminUserGetInfo
MprAdminUserRead

linkinfo

CreateLinkInfoA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ