0a9407087de3cd892cc77021f3c69bd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a9407087de3cd892cc77021f3c69bd7
Size

116KB
MD5

0a9407087de3cd892cc77021f3c69bd7
SHA1

7dac2ad3536555186ac84eece9c63db190195873
SHA256

e5c3a7dabed3e6bdcedb6315f4f4bc853b66708d513b32b1987bb4a3b68996cf
SHA512

c3a5f1119e781225357ddd9a5bef78d72fa9a9ad87c8c4373ebe682f155d966196281dd687503e882639df77d2b786d65cffa9d717aea5f70b79fc4cc5f850f0
SSDEEP

1536:fmZrORWjqSMb9HtLTEF4GOUk8WxnwXqRsDi:OZCFFb9tPX3UB4w6Rs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9407087de3cd892cc77021f3c69bd7

Files

0a9407087de3cd892cc77021f3c69bd7
.exe windows:4 windows x86 arch:x86

e6d14e070c25df53caa57859ee3d047d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursor
DialogBoxParamA
LoadCursorA
GetWindowTextLengthA
GetDC
DrawTextW
CopyRect
DrawIcon
GetDlgItem

kernel32

GetFileSize
FindFirstFileA
GetCPInfo
ReadConsoleA
Sleep
DeleteFileW
GetStdHandle
OpenFile
GetLastError
SetLastError
GetComputerNameA
CreateProcessA
GetCommandLineA
CreateThread
OpenFileMappingA
WriteFile
ReadFile
GlobalFree
FindAtomA
GetFileTime
DeleteFileA
DeleteAtom
ExitThread
GetConsoleMode

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 32.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ