0dd120de2ebd95c6af591df804c7b856 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd120de2ebd95c6af591df804c7b856
Size

63KB
MD5

0dd120de2ebd95c6af591df804c7b856
SHA1

087bc2e53b96e5da36562441e4fc17e5e9d7f9c4
SHA256

7e08cd9aec0fbc1fccb852f2f8a20c1ad4a8714d3625834bf5a133c14a11fdfe
SHA512

cb392836e5c4024f3d6d268b32b4207c1c56ea26a7fc14d8980192f3dd4619f07424bf891e610dc7a815bf735a5bd050a8867cab5ea13dddd49b32baf583e11d
SSDEEP

1536:bnlyUXS0VnEhUgmzP4AL/jOWaoV/48ljxzLDZqBwQiZQ6+E0W:zxJgmzQAL/j3948xxVqBwQifR0W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd120de2ebd95c6af591df804c7b856

Files

0dd120de2ebd95c6af591df804c7b856
.exe windows:4 windows x86 arch:x86

a121946d19ac7320f6d161238b3ac472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
FindResourceA
Module32NextW
SetLastError
BeginUpdateResourceW
GetNumberOfConsoleInputEvents
FindNextChangeNotification
LockFileEx
GetConsoleAliasesLengthA
GetConsoleAliasExesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE