0d042cbc1b19f288f93c6990e12b96c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d042cbc1b19f288f93c6990e12b96c3
Size

20KB
MD5

0d042cbc1b19f288f93c6990e12b96c3
SHA1

000f5766ce3284d8d8c540477443ec756925fbf9
SHA256

555588ee1af6357410cc08525f7c6b0ab5ff42dcd30c97caf2215bef4f7bb343
SHA512

06eacd62f73751ef4c318fd216c32371672a279a059514d3c613c6dc047061ae6774ad332ea1dab850d12b829447343e8c3889d4d186afd536188fef2d74fbe6
SSDEEP

384:QFkcX+LF8cFRZfw27iwWqqQGmraHZgeQM5WD5VamFhRr:QFXuRFRe2B5SZ1QkaCeD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d042cbc1b19f288f93c6990e12b96c3

Files

0d042cbc1b19f288f93c6990e12b96c3
.exe windows:4 windows x86 arch:x86

92dd91600b31de003a2777018e76a9e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
Sleep
CreateFileA
CloseHandle
GetEnvironmentVariableA
GetVolumeInformationA
GetFileSize
ReadFile
WriteFile
GetWindowsDirectoryA
MoveFileA
GetLastError
GetStartupInfoA
GetModuleHandleA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ