0f693fa31c49e84d13cfd25479e403e8 | Triage

Sharing

General

Target

0f693fa31c49e84d13cfd25479e403e8
Size

304KB
MD5

0f693fa31c49e84d13cfd25479e403e8
SHA1

0e28947aeb44af9f64c77b691b4428a12dd174c8
SHA256

5b30deb94a2212fd1e66bd87a28d6d8f7f2683b75964850f57e93c8d5e0f7008
SHA512

73f2c5e0e2de74960ee4c683dd34c7da028e03bd3b238c2f1ecc4cae3356c91177fdaf5e86731a8b1c545720417d2350ad3dc75dfa124de82658690eba545974
SSDEEP

6144:jGX+cZa38CoBz8kvercTkyb+4A/xICMQ5zIxVtaHoh7ku0+jMYvRb:jGucZJF8wrky6/xHVI1aHotN025b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f693fa31c49e84d13cfd25479e403e8

Files

0f693fa31c49e84d13cfd25479e403e8
.exe windows:4 windows x86 arch:x86

8f29d17702b040e46c3e8971368ffb6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ResetEvent
ExitProcess
GetTickCount
CreateFileA
GetDriveTypeW
GetCommandLineW
CloseHandle
lstrlenA
GetModuleHandleW
GetFileAttributesA
LocalFree
FindAtomW
ReleaseMutex
GetComputerNameW
GetSystemTime
GetTickCount
LoadLibraryA
GetDiskFreeSpaceW
VirtualAlloc

user32

CloseWindow
DispatchMessageA
GetMenu
GetClientRect
CreateWindowExA
GetCaretPos
DrawStateA
CallWindowProcA
EndDialog
DestroyCaret
GetClassInfoA
FillRect
GetDlgItem

rasapi32

DwCloneEntry
RasDialA
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ