0fa54551f1e02f035ec401ceef5cf0ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa54551f1e02f035ec401ceef5cf0ba
Size

272KB
MD5

0fa54551f1e02f035ec401ceef5cf0ba
SHA1

6dd05761109a6c39439b61db21be8b2b70985357
SHA256

54fea74fd0c150d6df554f8ece72d4c68208b0f2f8029300488139a551204124
SHA512

73b559588e03ec391ee1a0eed0279548e6b8075b487fac73d27e8f9ecd6c4e729a17e3ed54d8f529335fb98bb1d478a2bd87c2cae35975200f0eb34f5498642c
SSDEEP

6144:8hKio2S7+3Q4K4dvIAX55iSqwQsv73P6R+vIA6MFmB1Fw+4sfb:kg+3Q8hX7ce76QvIJMKwlsfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa54551f1e02f035ec401ceef5cf0ba

Files

0fa54551f1e02f035ec401ceef5cf0ba
.exe windows:5 windows x86 arch:x86

eb87fe4caf1ead7a00ed43159f7048da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
EnumChildWindows
SetWindowTextA
IsCharAlphaA
DialogBoxParamA
SetWindowLongA
MoveWindow
GetDesktopWindow

ole32

CoRevokeClassObject

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetTickCount
LoadResource
IsBadStringPtrA
InitializeCriticalSection
GetTimeZoneInformation
HeapDestroy
GetStartupInfoA
FindResourceExA
ExitProcess
GetDateFormatA
GetProcAddress
FreeLibrary
LoadLibraryA
LocalFree
HeapCreate
ResumeThread
LocalAlloc
DeleteCriticalSection

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ