0d9cd3249a91a46f8c2b67f9476d0967 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9cd3249a91a46f8c2b67f9476d0967
Size

216KB
MD5

0d9cd3249a91a46f8c2b67f9476d0967
SHA1

0a89b53d9628cd1deee8c1a3221ec99315a5fbbc
SHA256

21f9146e690dcee6812b44fa33ba898f893d0dcc613c67ce1c61bb747ed177c1
SHA512

e084937def27eba837031ceb79573bac3889f0f4e0bf381219f949bc2fb04a80d4c55463263f216d7bf164da8bf63d5c6e4af2aeb9e0537aded08b822621d40e
SSDEEP

6144:6+dt03j2NsyLgfgnqNOn3vXE5G3EW570IbP1faFNfH:bd+j2NbFqY324XtbPJaFNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9cd3249a91a46f8c2b67f9476d0967

Files

0d9cd3249a91a46f8c2b67f9476d0967
.exe windows:6 windows x86 arch:x86

439ff53323e9506db8654c0d8af9cf37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenW

ole32

OleUninitialize

user32

LoadStringW

msvcrt

malloc
memset
towlower

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ