0bc5ce094e6175912a7155d649753b78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc5ce094e6175912a7155d649753b78
Size

863KB
MD5

0bc5ce094e6175912a7155d649753b78
SHA1

847667f739cb0057c3cef03b46db3c967a5828ab
SHA256

7d181433952dc0546fffbd995b2caad08c2958f865527e5f45b7ff24b8e0196c
SHA512

4795509fdc6ddf17cef35f00b6c8ed19ac413de1c24ed278541fac156268ec134d1e12c64d54a7ca773b73ddf10936b2be421f2b74da8c84c1301676d422034a
SSDEEP

24576:zHyhQG3hNeXqckuOsy+/QKYbiqDp0Geqfz:Op3hkXqckuOsktifGeq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc5ce094e6175912a7155d649753b78

Files

0bc5ce094e6175912a7155d649753b78
.exe windows:4 windows x86 arch:x86

8d8ac275fe7c8e077417d66e38f60fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
EnumCalendarInfoW
GetCurrentThreadId
ReadFile
LocalFree
HeapDestroy
FindAtomA
CreateMailslotA
FindClose
SetLastError
GetFileAttributesA
GlobalFree
HeapCreate
GetCurrentProcessId
SuspendThread
GetPriorityClass
GetModuleHandleA
EnterCriticalSection
GetProcessTimes
GetPrivateProfileStringW

user32

IsWindow
DrawTextW
GetWindowLongA
DispatchMessageA
GetKeyboardType
CallWindowProcW
SetFocus
GetSysColor
GetClassInfoA
GetKeyState
GetWindowInfo
GetClientRect
DispatchMessageA

devenum

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

desk.cpl

DeskSetCurrentScheme

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 853KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ