0f1caf2fa4265920e643ae2705cd52bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1caf2fa4265920e643ae2705cd52bb
Size

111KB
MD5

0f1caf2fa4265920e643ae2705cd52bb
SHA1

3bf254b794c386ba8f2e4a917f57c609271d6eea
SHA256

bd1e912a97364fc12174737a2dda814b81f2032f9cb3c4fd3c4a91e4c58aefcc
SHA512

fd29808fe94827ce0522b01ba62c9bd121a4f92c4a05bff8dbe55e69489773000c5cb4460570e77cfbe950a8fb0317fd35ff9364040bf354e3fde1d63e6ada52
SSDEEP

1536:9NUQu8wELHUTlbilTuE3FAKN1M5Ymute7yKHVFVOX2YdqX9XhJs:4Qu8tHoql+f5raKtOrdqt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1caf2fa4265920e643ae2705cd52bb

Files

0f1caf2fa4265920e643ae2705cd52bb
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE