0d3056ceaa7dced398cd42c49745d0a7 | Triage

Sharing

General

Target

0d3056ceaa7dced398cd42c49745d0a7
Size

199KB
MD5

0d3056ceaa7dced398cd42c49745d0a7
SHA1

cd8c679d5e7a8b123d8ef98c51b7974e4e2c41ec
SHA256

bdd4e6d68ba94fb3ffa893d1e9fa370706ecc388038b1fab39000971ddd49b25
SHA512

829f5cec2612bbac787474e3072a82e3f81525ded7c3aa0dfabd79e21a3dc5d64a4a81dcef8781025565f288e64f74474cceac53eb74c67d493c9f4c9a010af0
SSDEEP

3072:ZRvudaAZA0TBOJyQezRVEASSnOZuq5qNt:/udNZt4JyzRVE8nSl5Et

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3056ceaa7dced398cd42c49745d0a7

Files

0d3056ceaa7dced398cd42c49745d0a7
.exe windows:5 windows x86 arch:x86

d124f5c1260bca965e63a67650a5686f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueW
RegOpenKeyExW
RegQueryValueExA
RegDeleteKeyA

user32

CreateIcon
GetCursor

Sections

.jkke
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gdle
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldcg
Size: 134KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ekhig
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fabgb
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE