0cf49225491f58b3d64f4da7bd304e3e | Triage

Sharing

General

Target

0cf49225491f58b3d64f4da7bd304e3e
Size

285KB
MD5

0cf49225491f58b3d64f4da7bd304e3e
SHA1

bfa01952f5c3cae91f0222e4a5d894b6c37dedfd
SHA256

298c67b45d460f8cfa0d054d7be4317d2a81bd79f654dd744466a73505ad8e9d
SHA512

0a69aa5dc3defa00cdceafbe0ac92ad1f2b3e278fc06bc596d4d38a08e5175c92e25d00baf609b7481f6d7cc69cb180113bacf5531fe836da766d1517fdf7999
SSDEEP

6144:O9j17jjCWXkANmZGceQhAmrf+jTCWdCJqv8+nY:aBjCekoD5QmIaTCWYJqv8+nY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf49225491f58b3d64f4da7bd304e3e

Files

0cf49225491f58b3d64f4da7bd304e3e
.exe windows:4 windows x86 arch:x86

c1abc6ce262cc14c5978844f354ce28f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
RtlUnwind
GlobalGetAtomNameA
IsValidCodePage
HeapSize
HeapReAlloc
TlsSetValue
SetFilePointer
MultiByteToWideChar
GetDateFormatA
EnumResourceNamesW
GetConsoleOutputCP
SetStdHandle
VirtualAlloc
TlsAlloc
GetTimeFormatA
GetOEMCP
WideCharToMultiByte
GetCPInfo
GetACP
WriteConsoleA
TlsGetValue
RaiseException

shell32

SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHAppBarMessage
DragAcceptFiles
Shell_NotifyIconA

user32

MessageBoxA
PeekMessageA
DispatchMessageW
CharNextA
GetDesktopWindow
LoadStringA
DispatchMessageA
wsprintfA

rpcrt4

RpcStringFreeA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ