0dc3c92f69f518c55b702b58c74ddfed | Triage

Sharing

General

Target

0dc3c92f69f518c55b702b58c74ddfed
Size

397KB
MD5

0dc3c92f69f518c55b702b58c74ddfed
SHA1

86a084a2b266747cb8248b0f40224f9615e40b77
SHA256

e26a0b9bb96211c92d955cf89417919fcbed3782e0d777fc85ed5c8cd63f5a69
SHA512

9e10d0881a7ec31f5d1f4daff472866a3cbbc9cf1f6e24ce9895fae4b4a5c91c6f6f5f3f768632a755361170f0048a99421f37ea1dbbed394df212b4eff9d253
SSDEEP

6144:OqG4Tc63QcLKYogbogaLPnLlnhBn89kfA6VkqSNpc21gvHfY+cWJlYe7ImVi8:OocOxFoNDnpn9fA6Vvm2cgVka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc3c92f69f518c55b702b58c74ddfed

Files

0dc3c92f69f518c55b702b58c74ddfed
.exe windows:5 windows x86 arch:x86

c4d4b4b0a79e0ec5bdff40ebc900c126

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
GetFileTime
FormatMessageW
RaiseException
GlobalFix
SetCurrentDirectoryW
GetACP

user32

FindWindowW
GetWindowRect
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW

crypt32

CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

shell32

SHGetFolderPathW

ole32

StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket

gdi32

DeleteObject
SelectObject
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetObjectW

odbc32

SQLFreeStmt

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ