0cad348fbcc21739a7b769bb7e5d17e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cad348fbcc21739a7b769bb7e5d17e6
Size

41KB
MD5

0cad348fbcc21739a7b769bb7e5d17e6
SHA1

af605189bc64dffc13aab6b41d8b459bbc290d70
SHA256

b7457906eefb01c5ab516eff19b550d7fe70ec692916697dc383b945f3b821c4
SHA512

ecc362424cd9ac2b586bf9c6b16d35e49868539c4f10561ac3258899e172893ce13a95fde6bffc36a776ac4db002c7723278c5e8eb7aff47df47561d309d2f89
SSDEEP

768:9pXBCBqNlLiXPom2zW7wvfzTXMDYiOp5iVD4BV+O5kefqZ:9Zm8luXPczWU3b9iN4mobfqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cad348fbcc21739a7b769bb7e5d17e6

Files

0cad348fbcc21739a7b769bb7e5d17e6
.exe windows:3 windows x86 arch:x86

25ad3193caa7ee0f39695f9e9c1f1c5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
OpenEventA
SystemTimeToFileTime
GetVersionExA
GetProcessId
VirtualAlloc
GetShortPathNameW
lstrlenA
GetLongPathNameW
GetDiskFreeSpaceA
SetEvent
lstrcpynW

user32

keybd_event
SetTimer
LoadBitmapA
GetTopWindow
GetScrollPos
GetMenuInfo
GetFocus
CharUpperW
SetClipboardData
DialogBoxParamA

gdi32

DeleteDC
BitBlt
SetTextColor
GetBkMode

advapi32

RegCreateKeyExW
RegCreateKeyW

comdlg32

ChooseFontA
GetFileTitleA
ReplaceTextA

shell32

Shell_NotifyIconA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ