0a9a6257769652a39c42b507769f7bc0 | Triage

Sharing

General

Target

0a9a6257769652a39c42b507769f7bc0
Size

6KB
MD5

0a9a6257769652a39c42b507769f7bc0
SHA1

6f92d99dd1386e07b1c4e8971e09640c6e5443bd
SHA256

4cdeac9b980f3b3054244a945489f465689230ccf2e5544433a292fe70b39186
SHA512

037971deb2b3350e605c27eb410be3294a6cf0297bd4fbc59647f9dc03301ff4f466740f3bc8ed875ebe0617a1dd124ae2009231aaaffa88783ed9d2e4f69949
SSDEEP

96:RB3eJnzjnMF27qwMwIKw8JLZM3mKdja91Q3SAlt7w4XL63iC/:R5eJPMF277MxKhVZGmKdKm3SK7BbkiC/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9a6257769652a39c42b507769f7bc0

Files

0a9a6257769652a39c42b507769f7bc0
.exe windows:4 windows x86 arch:x86

d15ed5878c780d1144376e84bf572d6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcpyA
ExitProcess
GetProcAddress
CreateEventA
LoadLibraryA
Process32First
CreateToolhelp32Snapshot
CompareStringA
lstrcatA
RtlUnwind

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE