0ff1c737c53df62dd24dc73a0e24ce68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff1c737c53df62dd24dc73a0e24ce68
Size

36KB
MD5

0ff1c737c53df62dd24dc73a0e24ce68
SHA1

f0de7660783d1d068b75270834fc69667901c488
SHA256

1ef07b729a3fc51a45828eace463c6a7cf6e0362bb4142c5e00469aef52045fd
SHA512

3e92c048554e675cad6312974a710538e5f9e0f93f8481f54140ee55819f93fcf9fb8acaa16eff52b930fd265dc287d6b6a404aef3fe021bdd929206a06d95c6
SSDEEP

768:2tFMcbjq+JOZtk4S7nyrFIwG/jI6ZoCYilvsUDGcY21:AFfb1OZtLuyZnG/t79GcY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff1c737c53df62dd24dc73a0e24ce68

Files

0ff1c737c53df62dd24dc73a0e24ce68
.exe windows:4 windows x86 arch:x86

bbc554d4125556120e3279f395f02e92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FlushFileBuffers
GetFileTime
GetTempFileNameA
GlobalAlloc
GlobalFree
DeleteFileA
SetFileTime
Sleep
VirtualProtect
WriteFile
lstrcpyA
lstrlenA
CreateFileA
MoveFileA
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ