0b82ab044c2a20f60bcad1ab373efbf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b82ab044c2a20f60bcad1ab373efbf5
Size

49KB
MD5

0b82ab044c2a20f60bcad1ab373efbf5
SHA1

5af225b95155e4e80f5266d4cdff8c538b099095
SHA256

e0d74a4bbce5d4af93687477dfbef968252c89c4da9eb12e468dc88e60bd9382
SHA512

98049fa5b1a30a145ad955bfbfa39d6fd817deb033ab19ec7a54dcbd76a17c6c7b8522cef374ead39052ab0ac25c883240fddfed91c8051283b07f8ed3d93d4b
SSDEEP

768:05x5PVItGvWU0wAcFi9nMifwC7Xh76OotGF1XM9gtDPLnoY3gjlNLSHlkr7:fAvHyWifwCEtGLXM9gtDPMY3QlMQ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b82ab044c2a20f60bcad1ab373efbf5

Files

0b82ab044c2a20f60bcad1ab373efbf5
.exe windows:4 windows x86 arch:x86

a3dffaabcf5f701d67f25b7896d767eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFiber
CreateMutexA
ExitProcess
LeaveCriticalSection
LocalAlloc
SetConsoleMode
SetDefaultCommConfigA
SetSystemTime
_lopen

advapi32

ConvertSecurityDescriptorToAccessNamedA
CryptGetProvParam
GetNamedSecurityInfoA
IsTextUnicode
LookupAccountNameA
ObjectOpenAuditAlarmA
RegCreateKeyA

user32

CopyAcceleratorTableW
CreateWindowExA
DrawFrame
EndPaint
GetDialogBaseUnits
GetIconInfo
GetNextDlgTabItem
InvalidateRgn
IsCharLowerW
PackDDElParam
RegisterWindowMessageW
SetScrollInfo

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE