01dd01868149afe14f96df1a32e34bca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01dd01868149afe14f96df1a32e34bca
Size

47KB
MD5

01dd01868149afe14f96df1a32e34bca
SHA1

149c23077a002cfc85e4f67cfe927df79f01aece
SHA256

0511bca0ab04fccd31890fea66c9751817029797765743f54b18e7c2d7f41bbd
SHA512

6e2afc232a73da12d4c3fdbafb1188ef60cb5f7dafc2fb3546df786f6ba0caca85d218b0f07c293dd47092b7389edb9c2faf5d67a902dced974cdeec4f00bc4f
SSDEEP

768:hGTNgbqCXZSJCjWW9V7pg+RI2ghCJhE5K+xMkwVw2Ii5lj/UG:hmKlcJmWq7dRIHhCJh+BxMkwVw215xU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01dd01868149afe14f96df1a32e34bca

Files

01dd01868149afe14f96df1a32e34bca
.exe windows:5 windows x86 arch:x86

5fd03f79fdac4e8510f9ec3f36e2430a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
HeapSetInformation
SetEndOfFile
DeleteFileW
GetACP
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentThreadId
GetStartupInfoA
WideCharToMultiByte
GetModuleHandleA

gdi32

LineTo

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ