0561eb86ca332e04b42b9c2e351b1899 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0561eb86ca332e04b42b9c2e351b1899
Size

16KB
MD5

0561eb86ca332e04b42b9c2e351b1899
SHA1

654a5bf71430d268ac8e5df27f544914e0822539
SHA256

7f47502574d2ae3bdd9bc4ef5eb9b8c970363da1e0f5e0a0c054f29afb5b4541
SHA512

f4bf3e8adf6e243ba410fb5dac9fd4ee882cf6163ae596cac345de079dccddbd3ded04d2b917f0d660c5b5f451033c8e626aa2a3ea0e09e8c986461045374284
SSDEEP

384:Q76PMoOmNUAJIQIGDzMlGY3T8QcAn2hP4XLz7DR:Q7dUJIQIGIT3T8QcA210jDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0561eb86ca332e04b42b9c2e351b1899

Files

0561eb86ca332e04b42b9c2e351b1899
.exe windows:4 windows x86 arch:x86

b573d7473d765046f2852aa7d0d03800

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetCurrentThreadId
GetModuleHandleA
SetLastError
GetCurrentProcessId
FindClose
LocalFree
ResumeThread
lstrlenW
GetConsoleAliasW
TlsGetValue
ReadFile
GetPrivateProfileStringW
HeapCreate
GetModuleFileNameA
FindAtomW
GetDriveTypeW
GetNumberFormatW
EnumCalendarInfoW
SetEvent

user32

GetSysColor
DispatchMessageA
GetKeyboardType
CallWindowProcW
GetClassInfoA
GetCursorInfo
DispatchMessageA
GetClientRect
IsWindow
SetFocus
GetMenuInfo
DrawTextW
GetKeyState

wsnmp32

SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout

msasn1

ASN1BERDecBool

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ