0dd0b73d18c53a5412230080b7285f2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd0b73d18c53a5412230080b7285f2d
Size

93KB
MD5

0dd0b73d18c53a5412230080b7285f2d
SHA1

afc47c140dc60732823754f2d022c81cf7b65a58
SHA256

3c928a898097625b02933c0a71876a1b92f0e1d9e159256fdec9aaf575bee1b5
SHA512

612661292c46cc3a9f09659ac0d9ff00f1f8abdcfd27ce3a906677c19f41fceb95632a04130d0202abb9efe7eb6d6565bae14f88f36408757708e6af0f991023
SSDEEP

1536:I2lHIrAF460skAlO3OSzPnmNYyDgx5bdDoFfA5ZUu3UJ4EoAq:vlor+/0sxY3Oe/VyDQ6SS4ENq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd0b73d18c53a5412230080b7285f2d

Files

0dd0b73d18c53a5412230080b7285f2d
.exe windows:4 windows x86 arch:x86

c37b6406030f28de3df68edb7afac293

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetCurrentDirectoryA
lstrcpyA
GetCommandLineA
GetStartupInfoA

user32

CharUpperA
CharLowerA
DialogBoxParamW

msvcrt

_acmdln
memset
memcpy
strlen
islower
malloc
strcmp
_controlfp
free
_exit
_XcptFilter
exit
strcpy
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ