0da196aa880b0e9880ce7e29a35de22a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0da196aa880b0e9880ce7e29a35de22a
Size

132KB
MD5

0da196aa880b0e9880ce7e29a35de22a
SHA1

937aa83d833abe46d84ea8e7e2ce2d130a056d2a
SHA256

6b30f4c5ecfbdb3209f587922d93c693dc704d4bd3414b6efb80f31b3c908159
SHA512

8a0f5a45c2248e47bad57decec14ec7feb77d905a44ecd1adbbc1f9ad10a020037cd50cf0bf0d3ebf373267a43e1d9a9dac3f439ee7ae101d954def5681f9385
SSDEEP

1536:RKAl81KDrsDocUniH2m4bTmlQoF79q2O7r7CHozSRTDt85ga/wtpVJFu7uVsYmXp:sY8JoFid48QoFgt73TOdq5MpVJ+DHo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0da196aa880b0e9880ce7e29a35de22a

Files

0da196aa880b0e9880ce7e29a35de22a
.exe windows:4 windows x86 arch:x86

f2d35b529e11b4159493deb73b3adf0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GetQueuedCompletionStatus
ResetEvent
FindNextFileA
ConnectNamedPipe
OpenJobObjectA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

PESEC0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PESEC1
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ