0a94694bca95ccb5f5be7529e8d9be22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a94694bca95ccb5f5be7529e8d9be22
Size

48KB
MD5

0a94694bca95ccb5f5be7529e8d9be22
SHA1

08da57fbaf382626eae39742603485315f8a896a
SHA256

f91da2cd5b27d92c6e070efa27e270a62168f12122f1a6370dd20fbc1aeba14f
SHA512

f894d6f80739a0606d06da6db4036b13e9c1bb4beb6e17bc05a05f75edd9e00af2b8fe4511350c2caa070a24ac681e6e6400d78908bd7b3d4036ee4b6552f786
SSDEEP

768:eauIXkrU/RX+zgP3dDRtbtvB36km7KT6AzYtzgFR899DwxQM0uz3Mr7is:3uIVpmgP3VtvBKkwVAzSgFRtxQM0UE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a94694bca95ccb5f5be7529e8d9be22

Files

0a94694bca95ccb5f5be7529e8d9be22
.exe windows:5 windows x86 arch:x86

f3105ecfac64b4631dca7cd24cdd0ea0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
DrawIcon
FindWindowExA
GetCursorPos
GetWindowLongA
GetWindowTextA
LoadCursorA
SetProcessWindowStation
SetThreadDesktop
ToUnicode

Sections

.jkr
Size: 38KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dej
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pwv
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ