0ac064cbac4b1c8550bbaea9f68f35b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ac064cbac4b1c8550bbaea9f68f35b0
Size

51KB
MD5

0ac064cbac4b1c8550bbaea9f68f35b0
SHA1

810ef1b93f25e201c88d0d53b9322d8e1128c353
SHA256

12c71efccaa383984c864834ceed00c6e637d6dd91f699208a1a5c3f511f5c05
SHA512

b7dc7faadb8ecdbccb98e2daba94a4a8b6daf319944efa5e444c68811f417aa5e76f0ce46d5625fdc8750aebdcf8b7cdbcd6625fd8be092384e3626152dd4558
SSDEEP

768:oiJ7hdr8IWfN+K6tRs/MD1eUOU0mlNSy:oiBhdwR1+KURs0DEnUDNSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ac064cbac4b1c8550bbaea9f68f35b0

Files

0ac064cbac4b1c8550bbaea9f68f35b0
.exe windows:5 windows x86 arch:x86

78a0ee33ff47711c51f5fea1c9b43dae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
GetProcAddress

user32

GetMenuState
EnableMenuItem

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ