0d3dd7e69b6494797274d3ce6dbbfb0b | Triage

Sharing

General

Target

0d3dd7e69b6494797274d3ce6dbbfb0b
Size

197KB
MD5

0d3dd7e69b6494797274d3ce6dbbfb0b
SHA1

b5d71ea93beef59a60221f13310b1da1c6267f7a
SHA256

c18fda2c17f3b7c0f5ed833c7ef802b3efd369295e28067375e5ea898a049cc1
SHA512

c9b7b70f82d7d46374c8043dccadad88a918552622330441b1162a4b8b29e317a532a9cfff1a275a457e0647be8b85923115a6e16cb8bbfcdf1c9bd0e5c80b26
SSDEEP

3072:yPNjKH282G0QZq56Gh5xIwSKHDwPzWVbldxk:yPpL156Gdfdj9da

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3dd7e69b6494797274d3ce6dbbfb0b

Files

0d3dd7e69b6494797274d3ce6dbbfb0b
.exe windows:5 windows x86 arch:x86

2b2e5d48f5fc8b7ba6bccc559bdba466

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadMenuA
AppendMenuW
CloseWindow
GetDC

advapi32

RegOpenKeyA
RegLoadKeyA
RegCreateKeyExA
RegEnumValueA
RegLoadKeyW
RegQueryValueExW

kernel32

DeleteFileA
ExitProcess

Sections

.hgjid
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dnihm
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bfhka
Size: 136KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mabbi
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ