0a2cca2202804bf99ec879adb7b7f9f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a2cca2202804bf99ec879adb7b7f9f0
Size

148KB
MD5

0a2cca2202804bf99ec879adb7b7f9f0
SHA1

22549046f4615fa3c78e071923b77927df38d5b7
SHA256

b72fcab789d2415db834f521ec74641bdab24735bef7ea4d06b59cabc444dcba
SHA512

c61cc78f8e7d779a7772e5b0855668fe5a247790816388fe566d55efce6622a9e7ab9646e66162e2501c47fc21e1a2dc6ec493e4a7c6e31c1959d4fe5d3bb074
SSDEEP

3072:LUjGB9fH/pqu4CZScGD0KYQiXhfIKcikFgBmnVEaSVI6awD:wjC9PhqPRlo4iRBcrEmVzh9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a2cca2202804bf99ec879adb7b7f9f0

Files

0a2cca2202804bf99ec879adb7b7f9f0
.exe windows:5 windows x86 arch:x86

8c097814aaa4e196c04a0e4f09916c5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
??2@YAPAXI@Z
__set_app_type
??3@YAXPAX@Z

user32

LoadMenuA

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
CreateThread
GetStartupInfoA
WaitForSingleObject

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ