0e7d00946124b8aae86cb66d9d64e32c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e7d00946124b8aae86cb66d9d64e32c
Size

548KB
MD5

0e7d00946124b8aae86cb66d9d64e32c
SHA1

bd79fad7b53c31058c3dc41f9e2fb86e9d00699c
SHA256

bd284d867e5ea268ad08ee497950e737d0e62c62e4dc5bc19e2dea6d9ceb74e0
SHA512

e84bd97874c9e525cfa847f4a17a88cedff4387b098ba7008728fb4fb7038d3badce10cec85e11ce2b71f58e7721479d1abc5fedc5fa12ef600b34a92ddb3141
SSDEEP

12288:/3TBIYf3q5UBQWjTtL5QowParxHpbWogSvY:/3dIYf3qWjxL5liAP1/vY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e7d00946124b8aae86cb66d9d64e32c

Files

0e7d00946124b8aae86cb66d9d64e32c
.exe windows:5 windows x86 arch:x86

ad862ddade77060019baac2ceed3d558

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA

user32

CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow

advapi32

RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA

Sections

.text
Size: 495KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ