0aa542a2de515bdfe6a0008e9c0c8a62 | Triage

Sharing

General

Target

0aa542a2de515bdfe6a0008e9c0c8a62
Size

53KB
MD5

0aa542a2de515bdfe6a0008e9c0c8a62
SHA1

d795bf5977504b07618f411bab2f4fb2ec1cee2a
SHA256

5a0248134e7f4b127ae9e08bd34be80547ffedf9826f6ebd0fb61942af21e6a1
SHA512

514ddf3fbc54b276b465a30389013ad15cabc0ebb041922fb4ade39cb535d537b230aeada6ab1a0c889185ebce9580710d21c71d4bb3a590f63e81e24b98be25
SSDEEP

1536:OCbPedEojV3KeFY5WWIPWoi5gSISmuK6W6Q:jbPehjRXFqxwWVIS8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa542a2de515bdfe6a0008e9c0c8a62

Files

0aa542a2de515bdfe6a0008e9c0c8a62
.exe windows:4 windows x86 arch:x86

4c1d2ddd3af82dc5356d91989309f1ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetProcAddress
CloseHandle
lstrcmpA
DuplicateHandle
SetEvent
lstrlenW
HeapReAlloc
IsValidLocale
GetVersionExA
SetConsoleCtrlHandler
GetDriveTypeA
GetOEMCP

msvcrt

_itow
_snprintf
_ltoa
strtoul
_strtime
realloc
wcscpy
_stat

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ