0cd532aed052eba64f886ea2facf48f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd532aed052eba64f886ea2facf48f4
Size

66KB
MD5

0cd532aed052eba64f886ea2facf48f4
SHA1

0d0476e397bb6853f9c09d572408d9dd5e90091a
SHA256

1e3039f7eaa446ff0e6703da95d54c22c8b5a463ee5985b195abb733cfbbeefc
SHA512

31575b5b4f4c058d7fd67a3c388c83fa72b02d812d641960a46befc831a2f4963c34691122ad6e706b2df3e1c30f352eb13f6f847e0fb3f7a4873c9e49857c4f
SSDEEP

1536:KtC9SWuxI/IaQMYHHaI+Kguqw9PXyw3vZzdT6y/EmYtd:KI9SqwaJYHHaIjSw9PXZ3vZzdT6y/zS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd532aed052eba64f886ea2facf48f4

Files

0cd532aed052eba64f886ea2facf48f4
.exe windows:4 windows x86 arch:x86

fe81dc07121a9d158bae8bd609ef5c71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetACP
GetCurrentProcess
GetFileAttributesA
GetStringTypeA
GetTimeFormatA
GetVersionExA
GlobalFree
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
MultiByteToWideChar
SetLocalTime
UnlockFile
WideCharToMultiByte
lstrcmpiA

user32

DispatchMessageA
DrawTextA
EndDialog
GetCursorPos
GetForegroundWindow
GetMenu
GetMessageTime
GetPropA
InvalidateRect
MessageBoxA
MoveWindow
PostMessageA
PtInRect
RegisterWindowMessageA
SendDlgItemMessageA
SetMenuItemBitmaps
SystemParametersInfoA
UnhookWindowsHookEx

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ