0ee07191f6eced045a87dede9c5cc51b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ee07191f6eced045a87dede9c5cc51b
Size

31KB
MD5

0ee07191f6eced045a87dede9c5cc51b
SHA1

b8e78bee8c1f3948a93ca74670eeaf2abc28ac33
SHA256

c1b87d2a051105d4d96eab852132eeb2b893ed481f1f589c6fe9cabcf890e336
SHA512

e815f0f21489d2da1134ee6059a0875368976472be2bf37cad4738ebf693540cb040bb2fd2cffbafd880b0e9fdd181c2f5b946b724d1349feb8baafa77d62c51
SSDEEP

768:mXXfyqfGW1kGDxYoHRQ/a4zm1WW4zXt+dWBb8QP:SNeoLDZQ/apwWYt+Wb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ee07191f6eced045a87dede9c5cc51b

Files

0ee07191f6eced045a87dede9c5cc51b
.exe windows:4 windows x86 arch:x86

e5e03ffd4e5d7df47c70b6256cb9ec90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleInputWaitHandle
MoveFileExW
SetConsoleMode
LoadLibraryExW
CallNamedPipeW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

CreateCursor
DlgDirListComboBoxW
GetWindowContextHelpId
RemovePropA
FreeDDElParam
ClientToScreen
AllowSetForegroundWindow

shell32

SHGetFileInfo
OpenAs_RunDLL
DragQueryFile
SHPathPrepareForWriteW
StrRStrIW
StrStrW
SHLoadNonloadedIconOverlayIdentifiers
ExtractAssociatedIconA
CommandLineToArgvW
CommandLineToArgvW

Sections

.text
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bwllt
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE