0d1a5fa6019a13710e82b273fdc59363 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d1a5fa6019a13710e82b273fdc59363
Size

155KB
MD5

0d1a5fa6019a13710e82b273fdc59363
SHA1

2167afa2f358036d02f9e05a6a6359e31a00a77e
SHA256

fe0e9b48607dd454f569d46d07d6d95ad68990968f7bd60639f66d14a59c3ccb
SHA512

1610f4fbe017ed797ecee5fcb71f81e769b1691e10a6b195bbf36e121c434e171a546455d3b11f92127cf23f25100c5070f61f721b132ae414797165d04181ba
SSDEEP

3072:qcF5ESOPcU60aqpjPFjRQXaoiM7sKbKVezFd3NnS+393Y:vEPV6OjPxRKr4CKVYFd3NX393

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d1a5fa6019a13710e82b273fdc59363

Files

0d1a5fa6019a13710e82b273fdc59363
.exe windows:4 windows x86 arch:x86

b6ab096e95dcc3996853d5320b7c6032

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

HlinkNavigateString

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE