0db21f2bd340eeb5891fc20b04970218 | Triage

Sharing

General

Target

0db21f2bd340eeb5891fc20b04970218
Size

424KB
MD5

0db21f2bd340eeb5891fc20b04970218
SHA1

93d7759d4affac358ac1d5b4540c526c03157bfa
SHA256

0c4cc358f4a7eb38bd97f5d9f871bfd630118cd1d8d51886b1f982be4a209ad2
SHA512

5550344d041bfc8dd54d12eb297bcf01afefe831dd36dbcc1506e6a9ff648fff3964ae199bb9efc9193adec8e9dce7ebe016933e5520098c2b2b796a9afa5a55
SSDEEP

6144:vt8aOTcmtqkuVe452R0175HWB0caAGfq2tNqUQtP98uP4Evx:vtkc8qBc452R019H5XAt2tNEJ98uwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db21f2bd340eeb5891fc20b04970218

Files

0db21f2bd340eeb5891fc20b04970218
.exe windows:4 windows x86 arch:x86

9c5c49bbd991585e6a35ce471cd75ad9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ResetEvent
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
GetProcessHeap
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

SendMessageA

winmm

mciSendCommandA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ