0fea7718b91e02dbbb382254ddb29521 | Triage

Sharing

General

Target

0fea7718b91e02dbbb382254ddb29521
Size

82KB
MD5

0fea7718b91e02dbbb382254ddb29521
SHA1

3581bee7666003dd5d9d1ba26f1ced114c100842
SHA256

d2b655df551fba7b9fc7fa457704f24877347df2a46c7cd2c2ac98e36abc5d9e
SHA512

92cd3db88e8a2cce7266753a243fd5eeae9d4fd0fa38a32f83c0977902d3465d9ea2c133c674d91e366775450ff1a852dbb1e1b18a492dd363c01e81a0053bb1
SSDEEP

1536:lG3DfTlzW6y41LlVwf+41iks8M6Qw/+XdOKKWc+2O:lG3DxHyILnX4fMaWXdOKpc+2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fea7718b91e02dbbb382254ddb29521

Files

0fea7718b91e02dbbb382254ddb29521
.exe windows:4 windows x86 arch:x86

2bb4b3c54d81a9e26726e5a7df19b8e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrStrIA
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

lstrcpyA
lstrcatA
WriteFile
SizeofResource
LockResource
LoadResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE