0a0558336ef6f6cd52d4201253d4f298 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a0558336ef6f6cd52d4201253d4f298
Size

222KB
MD5

0a0558336ef6f6cd52d4201253d4f298
SHA1

ce4795456b76b8833e6205c4433f7e3a11ee87e4
SHA256

30c8a5c9c08dd8e42f57142cb11daab6cdf46949b02ac2fe1e610ae5d3382a5a
SHA512

1a1440e580f10b431a816c36af2e44e728ff2c87192b28df4226925e3facf67645959dc100bf4a86700822139afdb6136dc2f60a9ff3e70bf3ac792cc98c0f13
SSDEEP

6144:uyWgnfr3o2IKFdWBJIqXQoK4RETBE6sI3:uy3nMYiJIuQT4uTtl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a0558336ef6f6cd52d4201253d4f298

Files

0a0558336ef6f6cd52d4201253d4f298
.exe windows:4 windows x86 arch:x86

9f3a34cefe75443d09d141644d8c70bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

advapi32

RegCloseKey

Sections

.text
Size: 221KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE