0b3b5bdc5fca282d3993deb9108cd835 | Triage

Sharing

General

Target

0b3b5bdc5fca282d3993deb9108cd835
Size

12KB
MD5

0b3b5bdc5fca282d3993deb9108cd835
SHA1

49ce9ffbee881c1aed51ed91ea3230707e2be126
SHA256

cd64525a19847b52fb58799aa0f22dd84cf2a37d3642dfa3214ce65cc3031b3c
SHA512

4d5edecfd82f7fa5d7992eeed707811ec9d1b222bad18487a24dd408b4b0694ac3ead2b5f352dc34a432659a17b44f46ce26eada603660eb2ee123e869e3acdb
SSDEEP

384:4Z3cJoOxFZv8BLUY51NkDjk5bPYqrIOQL:pHxLi4W2Djk5jYqrIN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3b5bdc5fca282d3993deb9108cd835

Files

0b3b5bdc5fca282d3993deb9108cd835
.exe windows:4 windows x86 arch:x86

ac499dfe30514f793676102a6ecabbb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
MessageBoxA
GetWindowTextA
FindWindowA
wsprintfA

kernel32

GetModuleHandleA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
TerminateProcess
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource

Sections

.text
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ