0e553b3c5182cf7de0b4d98f4aa2bb76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e553b3c5182cf7de0b4d98f4aa2bb76
Size

25KB
MD5

0e553b3c5182cf7de0b4d98f4aa2bb76
SHA1

b92def3d8941277cac0f97cd2244724c3faace64
SHA256

44d2c6e1e90a344f972c3744bf5f5c688000e9eb0771cbb8aba6366ee6ee4b5d
SHA512

1eee300cf44bede49211dc97617839e51839e5c723a6924bbdb4c449cdb64d28d7f642289cd78d18211358342b96d98f04fae052b4eee463d38e69888476acf5
SSDEEP

192:L0aJIJQSTST2g2orDTzTeNBiP1oynlPjjOUpjnEiVHkU:4aJIJzq25oTeN21nvXpDEib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e553b3c5182cf7de0b4d98f4aa2bb76

Files

0e553b3c5182cf7de0b4d98f4aa2bb76
.exe windows:4 windows x86 arch:x86

79cb6bba8c0a93287c914ad46d03aed1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCommandLineA
GetModuleFileNameA
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
GetUserNameA
RegOpenKeyA

msvcrt

strcpy
malloc
strlen
strcmp
memset
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ