0d2356139f963bc76272328f7143459d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d2356139f963bc76272328f7143459d
Size

83KB
MD5

0d2356139f963bc76272328f7143459d
SHA1

3afec85b914eda8a936769c0d06d85a852483336
SHA256

9a07d3d5cef52afb08562d6495f2f08384b399d2c1651404a6fdc4d127d13566
SHA512

da3f326728a03cb0a2316211e1ada9d664c049c6a5f3915d4db02f4b69e57bfbfe999fcc061faf28b717c4f94acf7942081f27e414804b9f92a63ba0d11a0276
SSDEEP

1536:DpKSnYC4h8YWkVGIDtVNRCWicZwabf+vjAo2co3VK6ikcljcfpjVrs2ryrd1vUQt:MhFJ9Ci+LavFKacZwHs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d2356139f963bc76272328f7143459d

Files

0d2356139f963bc76272328f7143459d
.exe windows:4 windows x86 arch:x86

603f422ce71691c997c861db68276601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
LZDone
WTSGetActiveConsoleSessionId
ExitVDM
SetConsoleCursorInfo
SetConsoleNumberOfCommandsW
CreateIoCompletionPort
SetConsoleCursorInfo
FatalAppExitA
EnumUILanguagesW
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE