0a40df918a4365fa93589162ac2a39f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a40df918a4365fa93589162ac2a39f5
Size

8KB
MD5

0a40df918a4365fa93589162ac2a39f5
SHA1

50d1e78fb2f04cddd176d7b869d29b574e356b80
SHA256

86169044ea548ee3e1e11bbf1664b88d7eadc14cb07f4ea4eb7f81b4646f4373
SHA512

aa7c71b70dda1350524b004454e20f47ee450ff42af05610dfbd3717239edfd0c2751484dca8d4b8db4fff03e66502243e472f956b7c9d9875671c2bb6b97c36
SSDEEP

96:XuAzPQbEua6EDLhDR0V9str1aWBryBlSMkmBb3bDrpuVK0plE0J/uHnf4I96nuBo:XV4b6ZhDSV9sP7yVkAylyHQI9jBW7le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a40df918a4365fa93589162ac2a39f5

Files

0a40df918a4365fa93589162ac2a39f5
.exe windows:4 windows x86 arch:x86

b0359257853ecb4c9fbd38a625715066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

fopen
sprintf
malloc
strstr
_strlwr
fclose

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE