0d1906f9157962d5d2235e803e392720 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d1906f9157962d5d2235e803e392720
Size

22KB
MD5

0d1906f9157962d5d2235e803e392720
SHA1

d101d9e62b1fdfc272cdd8336684ae433833c2ee
SHA256

ea3c4eaeaa1ecde92c6b08acc7d2c204974c85c812279354a07fdf36be84da90
SHA512

5c0c287eeefb978f454137c4f7eed63c3fff81fc26c1ef3d7aa02559b32e9615fee58b039e80f9e0228daaf2764d5891fca179b40e835e094a10866dd9807549
SSDEEP

384:5dKxnZyEXadMHaq54JCQSrzXXdJdt69yIATKyweZa6ivjABFY2nalm:oERdMHaq56CQSr7NJT687TLZ3iUFQlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d1906f9157962d5d2235e803e392720

Files

0d1906f9157962d5d2235e803e392720
.exe windows:4 windows x86 arch:x86

c2022d59063a3bee3e08b0792cf5ab79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

DisconnectNamedPipe

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ