0d995962184c74d6dab203e0d1ccea4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d995962184c74d6dab203e0d1ccea4e
Size

144KB
MD5

0d995962184c74d6dab203e0d1ccea4e
SHA1

9dbf456e3d96dc3c95a338fde00d3034427dd235
SHA256

3d3799582f18711dc6d5a9abca931c17adb54152eafca3a439d7af3a8f8728f1
SHA512

16c0ece287f0f1f289888e62fe178d86adee88eab5cd0f4a5ebc43405a20dc137dfc0e40641facd369af2c5f4093d6971fa50154ef7f408d5ab9ec81448d6056
SSDEEP

3072:3+XpfkAgUIYHatuMFQsiRcMPezRewGP+93xv:3CCYHatukQUSP+hh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d995962184c74d6dab203e0d1ccea4e

Files

0d995962184c74d6dab203e0d1ccea4e
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 133KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE