0d90dfa8c8d7a89abd23a641bb0b5d4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d90dfa8c8d7a89abd23a641bb0b5d4c
Size

63KB
MD5

0d90dfa8c8d7a89abd23a641bb0b5d4c
SHA1

4bc3329ced66365f2e6b05a932f628f27d4b6b73
SHA256

a2ca4ac48079505c3d7b8d2d7a1ac78da0adbcb1be262d07c36987a018c15ca1
SHA512

55f13ef23ea15af8d617437d373918498c19d64e5cdb1be40607246ce64296d1be0e7ab433850841c221182500961cbae5106f295ee1a80c301f57df2a7f33e3
SSDEEP

768:0aU+NLecv4G1I3umxfIl0UQ4WBjqKWujVY/7Q8Y8yiMKl9kR9/qNRQmAOu/GvvRO:3U13NjqKWyWjQgyiTU9/qPQmA5GHdBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d90dfa8c8d7a89abd23a641bb0b5d4c

Files

0d90dfa8c8d7a89abd23a641bb0b5d4c
.exe windows:4 windows x86 arch:x86

18701a69b66e3c22a2aee4436074c17a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringW
GetNumaNodeProcessorMask
DosPathToSessionPathA
SetSystemPowerState
SetComputerNameExW
GetModuleHandleW
SetConsoleCP
GetACP
RegisterConsoleVDM
GlobalAddAtomA
DeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE