0c61d4ca1f2c4f4d9377eb4a57832c99 | Triage

Sharing

General

Target

0c61d4ca1f2c4f4d9377eb4a57832c99
Size

2.5MB
MD5

0c61d4ca1f2c4f4d9377eb4a57832c99
SHA1

273c4e0e59c8ea37b03e31a1ce7bcd992640f00b
SHA256

9dc1be8218c9e011a5c4afd7b044119e6697876d1d8a9d34e49632915732b9ca
SHA512

045ee492799f690562b0d77d41062ee7c22f7c9db37750a959f29bb482e01ed34d16e19c6c4cb77d6417aab22a54f734dc00c24543600d4bb222ca12be8d88fc
SSDEEP

49152:WrGAsTKtrY9BoEmXQNLoT6ox24VFe7W0q0zmJJD5u3Ilx2ZE1:WrGA3t8boEmXQJix2og7Xq0SJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c61d4ca1f2c4f4d9377eb4a57832c99

Files

0c61d4ca1f2c4f4d9377eb4a57832c99
.exe windows:4 windows x86 arch:x86

335498d0ad50a15a00903711c9441b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 2.5MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE