0d93c6017dda05c07289b2d7886737bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d93c6017dda05c07289b2d7886737bf
Size

92KB
MD5

0d93c6017dda05c07289b2d7886737bf
SHA1

3b320dab97b36398e7a3f635cbd0e95da8e18ff3
SHA256

d2304783d9c3b52b71198367c6b25002a51f35ae61a79612860bb3107a543146
SHA512

01d6b3f768d1706c8450c8ff10c8d39bcf97da364852ae1180a0875f2ee6c62defd651f1a1ddef86541ec01c2ede8dcc04dd4db6d6cb90f116c2b611fa039937
SSDEEP

1536:hFEUc0dkdxoepjMSxnAfUvCJ+sOofO98aXhxxGGO4udiosgHvF1BXY:LqdGUJxAfUvknO9z+G5udiMtPXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d93c6017dda05c07289b2d7886737bf

Files

0d93c6017dda05c07289b2d7886737bf
.exe windows:5 windows x86 arch:x86

58b294e594e58ec02283d288e70e2aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursorPos
SetWindowTextA
DeleteMenu
EndPaint
CreateMenu
GetInputState
LoadCursorA
RegisterClassExA
GetCursor
CheckMenuItem
DestroyMenu
GetMenuItemCount
LoadIconA
BeginPaint
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
GetMessageA
PeekMessageA
GetWindowLongA

gdi32

DeleteObject
MoveToEx
CreateSolidBrush
GetStockObject

ole32

RevokeDragDrop
StringFromCLSID
CoGetCallerTID
OleIsCurrentClipboard
ProgIDFromCLSID
CoInitialize
CoTestCancel
CoFileTimeNow

oleaut32

CreateErrorInfo

comctl32

GetMUILanguage

kernel32

GlobalFree
GetSystemInfo
GlobalAlloc
GetEnvironmentStrings
DeleteCriticalSection
GetLocalTime
FreeLibrary
LoadLibraryA
GetCPInfo
HeapAlloc
HeapCreate
LeaveCriticalSection
GetModuleHandleA
EnterCriticalSection
GetLastError
InitializeCriticalSection

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE