0e1b770cea28577f96a4fe9e6d3a16a5 | Triage

Sharing

General

Target

0e1b770cea28577f96a4fe9e6d3a16a5
Size

27KB
MD5

0e1b770cea28577f96a4fe9e6d3a16a5
SHA1

39276bddc0c2b152a49446abc1be32b199ff70cd
SHA256

de7261dfe00faeddfbc301fc9f0c9929f7ed41a4c268ec6e5325d398b8b1aa78
SHA512

0610a5876f5b8b5221bb28e985c7d5ec3fee71487ceb13ad89736490f19de8dce909a0ad7c082fd476c1edccdd6b1ba8a189abe2d2d0e421c868135a246aa5ab
SSDEEP

384:lpD9VYfwIzbKkavborq+css8uLkKjORh48FTOMZHDOl6yraSEgUx2mBKD:tVYvz7+boFo8uQzRhfqWylhVFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1b770cea28577f96a4fe9e6d3a16a5

Files

0e1b770cea28577f96a4fe9e6d3a16a5
.exe windows:4 windows x86 arch:x86

0d9a6f29cd7624f47a6dbcac4d11416a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
GetTickCount
lstrcatA
LocalAlloc
lstrlenA
GlobalAlloc
GetVersionExA
CreateEventA
GetCommandLineA
lstrcpyA
CloseHandle
GetStartupInfoA
Sleep
GlobalFree

gdi32

LineTo
ExtTextOutA
BitBlt
SetPixel
CreateCompatibleDC
SetBkMode
GetPixel
DeleteObject
SetROP2

user32

BeginPaint
DestroyWindow
GetMessageA
LoadIconA
ShowWindow
PostQuitMessage
CreateWindowExA
MessageBoxA
ScreenToClient
GetSysColor
GetClientRect
SetFocus
GetFocus
TranslateMessage

msvcrt

wcslen
_except_handler3
__p__fmode
_c_exit
_acmdln
_exit
__set_app_type
wcschr
memmove
__setusermatherr
_controlfp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ