0dd8ce7e0e3f1908d4b8b9b14c8a22fe | Triage

Sharing

General

Target

0dd8ce7e0e3f1908d4b8b9b14c8a22fe
Size

109KB
MD5

0dd8ce7e0e3f1908d4b8b9b14c8a22fe
SHA1

03b32db19668e9750564c8e4b9bd7e27b3aa3ea8
SHA256

e6580bfd402094990382f5d0e39d1a58e82a40fc6ea47bbf5efb0d6a30220b15
SHA512

192750415009b1a62a15d3357456eddfbdc3b53bfadb8af04315ce0a674efaa5a3e184de1248f1e0f5197bc40491a68c0cd974c8a32a29f29aadf66c9f520154
SSDEEP

1536:jZxoklV834iQ6Ugi+GtUuDQEM89M/BSU7gyU4uTSqBGeGF6sogyX05Vj5Lr0qfVl:jjokDifioByQBYD4uTSqOM+eqfVmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd8ce7e0e3f1908d4b8b9b14c8a22fe

Files

0dd8ce7e0e3f1908d4b8b9b14c8a22fe
.exe windows:5 windows x86 arch:x86

ec6e87047f0040940b46ffb353032529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
lstrcmpA
RemoveDirectoryA
lstrlenA
GetSystemTime
GetModuleHandleA
VirtualAlloc
DeleteFileA
CopyFileA
VirtualFree
lstrlenW
QueryPerformanceCounter
GetWindowsDirectoryA
GlobalFindAtomA
RemoveDirectoryW
FindClose
GetCommandLineA
lstrcmpiA

user32

GetParent
CharNextA
GetDC
TranslateMessage
GetDesktopWindow
GetSystemMetrics

gdi32

GetStockObject
GetObjectA
SetStretchBltMode
CreateSolidBrush
CreatePalette
GetPixel
DeleteObject
SaveDC
DeleteDC
CreateFontIndirectA
GetClipBox
SetTextAlign
SetTextColor
GetDeviceCaps
SetMapMode
SelectObject
RestoreDC
CreateCompatibleDC
RectVisible

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ