0d5e3cdcb8abbbc50bd3504eb6f7398f | Triage

Sharing

General

Target

0d5e3cdcb8abbbc50bd3504eb6f7398f
Size

22KB
MD5

0d5e3cdcb8abbbc50bd3504eb6f7398f
SHA1

c5db36ab1973fcbbb61d0fd4c7483dc8710b23d2
SHA256

0b792f3cd9fd9f2103a7663247d24daf2051b096843ae2ab3c946b84c06fcce1
SHA512

c2bfc7ce1525a81e8a2eb8b90e74db0f8410f75fc933d486de71531fb110425032890ee5811a24513743a617278786fd9d8bf194db749cc316834f8ff98571b5
SSDEEP

192:mjRHgu2fCKxcsLniruu/33IkCBM6/dK2+Pq8OU1vc7Czvyr5Pz3CDV:mPuCKxjnNu/nItI1Pq3U1kIK9PzSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d5e3cdcb8abbbc50bd3504eb6f7398f

Files

0d5e3cdcb8abbbc50bd3504eb6f7398f
.exe windows:4 windows x86 arch:x86

164759b5432d146f30fdba9e1ded94d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
malloc
signal
strlen

user32

FindWindowA
GetAsyncKeyState
ShowWindow

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE