0fe81d4f8de665d348edb7e4e92ae097 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fe81d4f8de665d348edb7e4e92ae097
Size

221KB
MD5

0fe81d4f8de665d348edb7e4e92ae097
SHA1

ecc775101e19d1371797c0861a6fde3a8586ea67
SHA256

4c4b0d0b5d89c472ca45d7d9ca5b2047e291f989660723c477f1443d39297a3e
SHA512

3ecf43562f0f52d826cd20eba334163b1630c7ae8219620e2a0c63a080525e0c2f0e86075b1d1b10589ffd67696972b08c119481c87e3a3537719afc334ee32a
SSDEEP

6144:UuUZdwb+lox+VrO6JxheyVTdpnHQZJi+mGSnL:UDwb+l4+VjJxfBdpUJivnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fe81d4f8de665d348edb7e4e92ae097

Files

0fe81d4f8de665d348edb7e4e92ae097
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ