0b23a2757214044bab8b94846ee033b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b23a2757214044bab8b94846ee033b3
Size

240KB
MD5

0b23a2757214044bab8b94846ee033b3
SHA1

575c4947e3db0da11a013896c701da628198be61
SHA256

b491bd815b50a79792cb1f5753b0d55d53caa83198f2d4cfcb937d1abf69eaea
SHA512

a9ded67eba8c64fcd980c6471ddeeaf085b646474182f6a4fab7319c6a01a539939bb0e58106d238d39d22d41b140384f130eba6198e40e253ede33827d38e29
SSDEEP

6144:zNuRbHCjIfFFdAS6yJGaoYVScGMqNqWLSo06xP:zCzCjINFmnyfXSDMqbzfxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b23a2757214044bab8b94846ee033b3

Files

0b23a2757214044bab8b94846ee033b3
.exe windows:4 windows x86 arch:x86

8afb42e8b00e7403d30dd26c8dd74aad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleCursorMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

shell32

ShellExecuteExA
SHAppBarMessage
Shell_NotifyIconA
FindExecutableA
ShellExecuteA
SHGetFolderPathA
CommandLineToArgvW

msvfw32

ICInfo
ICOpen
ICSendMessage
ICClose
ICGetInfo

Sections

.text
Size: 149KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE