0a692435a8ccff7657194351eabe2d02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a692435a8ccff7657194351eabe2d02
Size

116KB
MD5

0a692435a8ccff7657194351eabe2d02
SHA1

c7c6351ac8e8096aaa360844c8b6929e7c1c6e00
SHA256

b634a073a7f9ff549860485df5501a3e4ff726fab9b7453d6e72a8aa2cabbf34
SHA512

498216932f39919143bf277e41f075943e1b49a8263c4c2d1db04868532a120d730a970ab47893296b33caddcabf73a2af2d51fc0af915803f6947d99ea483f3
SSDEEP

3072:LYq9gJA8mRXrVUwmsf246Oyn5PGmFq+/FTJK5:LYKgG8qXrDPmFqiFTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a692435a8ccff7657194351eabe2d02

Files

0a692435a8ccff7657194351eabe2d02
.exe windows:4 windows x86 arch:x86

b794a04194e62d6028bd3f3093110807

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
FindWindowExA
MessageBoxA
PostMessageA
SendMessageA

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetTempPathA
Sleep
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 92KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ