0d3c49c7f8b81f9856850ebdad7b2f5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d3c49c7f8b81f9856850ebdad7b2f5e
Size

5.2MB
MD5

0d3c49c7f8b81f9856850ebdad7b2f5e
SHA1

36d2220b9a5d38f35717f31bdee8621849c8434a
SHA256

4ef207d7b4b543f99eb1020206af53111e0eeb6405e0ee07b47bf64c430a3a10
SHA512

350e9842d87241e821fdc74e2e16d5a0c78bdae1c9428716f56678a73a40d51dbe98941fae74d803e4efab6944d505bea48344c2ecc65ef0301d421a4288b3ab
SSDEEP

98304:UOHpdurJ+/YK29nyL5qvlGwOzZistT6+OpRCekqp/OzN2:UOJYUADByL7vNOpIekqpGzN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3c49c7f8b81f9856850ebdad7b2f5e

Files

0d3c49c7f8b81f9856850ebdad7b2f5e
.exe windows:5 windows x86 arch:x86

5e98d3cd41bef0b3d8d89ea36d35f492

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
CreateMutexW
lstrcatA
GetModuleHandleW

user32

CharUpperBuffW
CharLowerBuffA
CharUpperBuffA

Sections

X
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

X
Size: 512B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

q
Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Z
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

B
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE