0b7a4a03c23011a827b21f6d7ce0c813 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b7a4a03c23011a827b21f6d7ce0c813
Size

300KB
MD5

0b7a4a03c23011a827b21f6d7ce0c813
SHA1

8e4aa15eedf62cb33ba716ed6db8cb91e53f8a3a
SHA256

1cdd7381d2f726df6a5accd23d12012c7966282a5d3144bb4625c12a190f15d9
SHA512

1292d75351e437ad6fbb0cb58917a406ab210a8b26aa89daa3f6847d245c37981a10543592b4e98ec186b457a9655303bfcaf7c5fd1f6cada1eadb6655590cb7
SSDEEP

6144:YTsZO044WwG9dFhzVNwVzPKppcnF16WLay0M8ntD11+dLUv:YUOPeqF5izSp+nF16WxvWtD11k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b7a4a03c23011a827b21f6d7ce0c813

Files

0b7a4a03c23011a827b21f6d7ce0c813
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 288KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE