0e5e8a3948deaa438cf2947a90f6c4de | Triage

Sharing

General

Target

0e5e8a3948deaa438cf2947a90f6c4de
Size

38KB
MD5

0e5e8a3948deaa438cf2947a90f6c4de
SHA1

8efc7d9c1979e838b3ca1474b841732308729074
SHA256

f9cd089253a5d2c125132ea74246549f8a316f5652e4dca14d6c246d71e5fedc
SHA512

4ebcfb41e2fd0ea8ef84a5231339775b88afd90b0b2cf8ff51e46cb5bcbe4c24b4e33c1c88e7b17fccf82a017bfe12f1409ce0d53995a957168a841e05957334
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan8E:EoGBwgc7miL85ZGWQIohZAAfm8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5e8a3948deaa438cf2947a90f6c4de

Files

0e5e8a3948deaa438cf2947a90f6c4de
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE