0dba4477aa9d25d3230f68114c279cef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dba4477aa9d25d3230f68114c279cef
Size

337KB
MD5

0dba4477aa9d25d3230f68114c279cef
SHA1

04be1c6018c6a01b733658745fa5506655791a9c
SHA256

1c2135939ccc5d00f2f833544d61d6ba6d4dc5898bb1ab9d154004999cff7440
SHA512

309a9f149a418fb87e0ca7154df45d54b3d70d4d1b8f715e8456924d7bdbe35759237fae63fd6db8f4da0c0085e8fef01d529ab7c73dc0b77d793d306c58e224
SSDEEP

6144:OQC7Fhjrxd4lakFcJtX7HW5XH7Xv6Ak2GBJR1ND1iS6uq3kPdyumdBFN:ZyFhj1CrFc3X7HoHj2D/z6fUA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dba4477aa9d25d3230f68114c279cef

Files

0dba4477aa9d25d3230f68114c279cef
.exe windows:4 windows x86 arch:x86

4e292b7bd0cbce95dce8517a93f5dbf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CloseHandle
lstrcatA
SetEvent
SetLastError
ReleaseMutex
GetSystemTime
GetDiskFreeSpaceW
GetComputerNameA
LoadLibraryW
GetTickCount
HeapCreate
GetCommandLineA
ReleaseMutex
FindAtomA
CreateFileA
GetDriveTypeW
CreateThread
GetFileAttributesA
LoadLibraryA

user32

CloseWindow
GetKeyState
CallWindowProcA
DispatchMessageA
SetFocus
GetClipCursor
GetDlgItem
DestroyCaret
GetComboBoxInfo
CreateWindowExA
DrawStateA
GetClassInfoA
FillRect

cryptnet

CryptGetTimeValidObject
CryptUninstallCancelRetrieval
CryptCancelAsyncRetrieval
CryptGetObjectUrl
CertDllVerifyCTLUsage

desk.cpl

DisplaySaveSettings

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ