0a740456e961820ccec6337ad4494111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a740456e961820ccec6337ad4494111
Size

60KB
MD5

0a740456e961820ccec6337ad4494111
SHA1

0be0043c78e45ad1746b848c06559644eeba794a
SHA256

8495b3a05b5c0144c18125865b7fc63e0b405f2e5e8fc2e92eec4f64814aa8cf
SHA512

dbe766d810758571994cc8394a3e249426a52a978c6feb8439542b60a7bd1a31e8ba5bca790a5d0d04fbac15a729eafb2f4f95c64901a095e7b674255eee5894
SSDEEP

1536:tRHjTeNlazf5v/324MwH+YkZ2TulEjn2T:tZgczRv/3dBms2T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a740456e961820ccec6337ad4494111

Files

0a740456e961820ccec6337ad4494111
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE