0f4929b7260ec9f61efac03ab15f4171 | Triage

Sharing

General

Target

0f4929b7260ec9f61efac03ab15f4171
Size

234KB
MD5

0f4929b7260ec9f61efac03ab15f4171
SHA1

63de7354e46191ac9dd4ce326ee1359516346c80
SHA256

7c78f1045b3647b09133f190d8175398408d9e26dedb4c8dabce0099063feb21
SHA512

027aa5024b70e9a63634c229a3969f41ebf0fa1e864167312c7b52b0cdcb941dfd58d1427023d7d4856f4eb2680e61f7d4e586f4bba6eb3d53b22a25652f8235
SSDEEP

6144:DEOEBJj+ecRmKqFVXD2GEgE87CgCt82o7sPy+MuOZTeM:DEOi5+5RmKqbX4gDs8H6DOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f4929b7260ec9f61efac03ab15f4171

Files

0f4929b7260ec9f61efac03ab15f4171
.exe windows:4 windows x86 arch:x86

499aa424102a114a35c5f8f782552ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIexp
_CIlog
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GlobalFree
GlobalAlloc
HeapAlloc
HeapFree
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 208KB - Virtual size: 212KB