01a55ba25ef8232b4c6095cf5fef17b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01a55ba25ef8232b4c6095cf5fef17b3
Size

88KB
MD5

01a55ba25ef8232b4c6095cf5fef17b3
SHA1

1672ce17560a03e08c5a82d916222cf2ec91ac0d
SHA256

38d2ae7f9e24087e72802c1572aa58aa22579024385f56ee6055319408ba1f72
SHA512

1210a08f29f0c26f6f40f1259dab635e92094986f721934bbfb2d89c77ac85885e0591ab19cc8efff3c78a2a299323e8b36d4669130c39923096c216f6199ff4
SSDEEP

1536:gtVniy4n4tz9XDufuCT8K23CcFY8RflhNedQGzS+q7oN/Rs:gtVniy4izdaftT8K7cF31e+lojs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01a55ba25ef8232b4c6095cf5fef17b3

Files

01a55ba25ef8232b4c6095cf5fef17b3
.exe windows:4 windows x86 arch:x86

f6fa93597a4536dfedd81a900d1e9576

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

RegSetValueExA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

shlwapi

PathFileExistsA

Exports

Exports

?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z

Sections

.text
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bad0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.bad1
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ