0b8490ae398e7334b92547a406b62af3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b8490ae398e7334b92547a406b62af3
Size

54KB
MD5

0b8490ae398e7334b92547a406b62af3
SHA1

2e30e908731e22c48a647a7ac59c5982a5ad8c93
SHA256

dba178955c0cc414b69482a289b7b9a16d106a68363a0991999df104cd307b68
SHA512

a532af5ffe289a733782eee32c56758ea89785970273ac7939246de7dd11dc5c70eadba5992fe878b3cc28dcc53af4d5a7bc27a783c780bad5897a7850be20b4
SSDEEP

1536:lG+w0gVpaL+oxfWkPzQBTdnq6O+7/yw3D75/:lFZcIxekP8B1r9/ywJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8490ae398e7334b92547a406b62af3

Files

0b8490ae398e7334b92547a406b62af3
.exe windows:5 windows x86 arch:x86

347b4853a12068bebcb1b9c4552b309d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CharLowerW
CloseDesktop
EndDialog
FindWindowExA
GetIconInfo
GetKeyState
GetWindowTextA
LoadCursorA
OpenDesktopA
PeekMessageA
ToUnicode

Sections

.gzon
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odwp
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pax
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ