0dd33dc3d29b28bd7bb3d19046dc4197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd33dc3d29b28bd7bb3d19046dc4197
Size

786KB
MD5

0dd33dc3d29b28bd7bb3d19046dc4197
SHA1

b428f05b8166731369148087b16c67eaff4d3dfd
SHA256

276e474a86a8a534f7bb9c9d7b7c56cdeed0493bbbe952216bed34718f7c1dbc
SHA512

9a55a5613322ec803f68956a4ee686101faa42d976f5f046173c014aa4f83f945fc8fde5a2d0ab7953541867166174e1404d76b5dde01e6cf5b6934bd99c7aec
SSDEEP

24576:+7ztD52u9jPV1308w9raZvTHKLSYh5fdJO:+7OcjPHE8grWTHtyd8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd33dc3d29b28bd7bb3d19046dc4197

Files

0dd33dc3d29b28bd7bb3d19046dc4197
.exe windows:4 windows x86 arch:x86

b77dad5a499cd625252b2f4a6bf03c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

urlmon

CoInternetCreateZoneManager

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

shlwapi

SHAutoComplete

Sections

CODE
Size: 772KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE