02da045778a151f75936c1cf49ac4359 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02da045778a151f75936c1cf49ac4359
Size

89KB
MD5

02da045778a151f75936c1cf49ac4359
SHA1

6fe6590076f927e02902c1e8756d2d5495d9b655
SHA256

b7c722080d155f64c7887c3c0ac3a3cf62f14f8402981a8430a577d5669b9cad
SHA512

76be27532c4613cb9f304a41fcf5bac5b291b1f08a469d0d89f43e938349b130915c8f5bdbafb6855b46b63d78b119e61121919bfb38719d32e6668cbfaa245f
SSDEEP

1536:1iXveMUKhNScMmns9CQrdfbiDzFpSQaPqMtRxoTXPYpueoWmkraOFwnCIShB1Wsz:ggcu9CQrVbiDzFklqGsLPYpueoWnBI63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02da045778a151f75936c1cf49ac4359

Files

02da045778a151f75936c1cf49ac4359
.exe windows:4 windows x86 arch:x86

baa1058d5e8ccab413f9dabe12a62758

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
FindResourceA
GetSystemTime
LoadResource
MapViewOfFile
ReadFile
VirtualAlloc
lstrcmpA
lstrcpynA

user32

EndPaint
DrawStateA
DestroyIcon
CopyRect
CreateAcceleratorTableA

advapi32

RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ