0a96a7a5a76e0c9162745dd5b4142be0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a96a7a5a76e0c9162745dd5b4142be0
Size

183KB
MD5

0a96a7a5a76e0c9162745dd5b4142be0
SHA1

8e3a10ae085332154a4363d6226cd3f172bb34d5
SHA256

497f1600551beaaf0646ff75bdf0fe33dc55291f74b2484b2b497f925684341f
SHA512

1b9628769fcc251c60e34ae128f2eb695233220d95b904e1a3d3d4f7fec5eee60eaedc5b15c293e5846e9ddfcbc2bf8dafa7c8b7e26940eb7e349ab111cc6d15
SSDEEP

3072:2/hB35W55Tse5dOjYwVNvTJbywc6dnBE5yVaijTpDVV016eJ374op8+aHt:ekeEdOjYmVtx3E5QNHZVrqr4fHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a96a7a5a76e0c9162745dd5b4142be0

Files

0a96a7a5a76e0c9162745dd5b4142be0
.exe windows:4 windows x86 arch:x86

4b329bb2c6c2194cf9d283efbf118d94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
FoldStringA
QueueUserAPC
FreeLibraryAndExitThread
RtlFillMemory

user32

LoadImageA
SetFocus
DeregisterShellHookWindow
DdeReconnect
OpenDesktopW
CreateCaret

shell32

Control_RunDLLA
SHFormatDrive
DllGetClassObject
SHGetFolderLocation
DragQueryFileA
ExtractAssociatedIconW
SHChangeNotify
ExtractIconExW

Sections

CODE
Size: 9KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ