0904a7dbdfd19397e12b3e6a0ce5ca77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0904a7dbdfd19397e12b3e6a0ce5ca77
Size

226KB
MD5

0904a7dbdfd19397e12b3e6a0ce5ca77
SHA1

8f77b7ebf18cc08b5821281e63e2864baf3e2169
SHA256

02f219e86791727efbc7d24273381485d1843ec9d85fa2d6fbd902d8e7c2fa12
SHA512

a5db0d68627d139476aa9be24d46d14cb54e246f00c661bcc71cc60e9c44fdc07b256e3169cd5b846e79e9e2be4b1d99ae0e19bf6f3775896c94d121a4808c2d
SSDEEP

6144:GY4NW0EW47tREX+0q9/IN1usjMdLLA9qc+7gWHx1:2W0EL7jNNITAdL2OkWR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0904a7dbdfd19397e12b3e6a0ce5ca77

Files

0904a7dbdfd19397e12b3e6a0ce5ca77
.exe windows:6 windows x86 arch:x86

76cb49957629b5fe0d40d13588a8762e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleW
GetProcAddress
LoadLibraryA
LocalFree
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ