02bf2089c98ae432e79b55bbbbd180b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02bf2089c98ae432e79b55bbbbd180b3
Size

60KB
MD5

02bf2089c98ae432e79b55bbbbd180b3
SHA1

5e791d80973c849e6f595cefce130e6f13553078
SHA256

75cf82f4af4ba3d7840509029105c28ff278be377c1feebb8c396e6ceaff96dc
SHA512

8a2bb7d5f8de61b47c8b05d01c090749a6098bf6f362a7195a20c95623fb96daf40125ccde5d1eb9a26bdbb01cb6fe27b8a13368a878ee96de711d15d17997e9
SSDEEP

1536:Io4bQsNZt4NnwI/tCtyU6YZfkmLkbslInO9:XG5Tt8nwI/t2/60kmweIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02bf2089c98ae432e79b55bbbbd180b3

Files

02bf2089c98ae432e79b55bbbbd180b3
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE