0be2a726e4729894f17733172e19cb3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0be2a726e4729894f17733172e19cb3c
Size

34KB
MD5

0be2a726e4729894f17733172e19cb3c
SHA1

f40b1169150341159a3ccdf400941f62036ca6bb
SHA256

4cb9410e01672a234d4ef6ad4dd3b13e8be045642eb43f2d82a67dc0e6decf26
SHA512

bdc71ecc036597b912a5be82249631538c9edb1b3f1175b8c7a6f35d087e9f26abc1ad45c1a5d3bd5b3729310185030f6bbf741d8b937880f80b9d2557311960
SSDEEP

768:f6y7vV2BT/sgrW/ReCJyxQLu0Mu+lI3vYlngUoM:f6yR2BNwkxDC+l5tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0be2a726e4729894f17733172e19cb3c

Files

0be2a726e4729894f17733172e19cb3c
.exe windows:1 windows x86 arch:x86

eba95acd545d0994c2763aab91cd8e7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
RtlUnwind
CreateFileA

user32

SetDlgItemTextA
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
RegisterClassExA
PostQuitMessage
ShowWindow
CreateWindowExA
DefWindowProcA

gdi32

GetStockObject

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
exit
fclose
feof
fgetc
fopen
fputc
fsetpos
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 596B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE