0feda882076fe53a550a8419accc8448 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0feda882076fe53a550a8419accc8448
Size

36KB
MD5

0feda882076fe53a550a8419accc8448
SHA1

9a422a043afd07bd6c3f47319d3fb8e0346bd46c
SHA256

ec9e41c63cb8d12a2113a7f8f26606b8cb1350c12cb7502b4681337f173bd417
SHA512

67bef4e9bcc41ee51658d01b0eadcf7f88a9b97b341d6adcd73227564efa24536d200fbd122108c735e27b11f3f0e6d86059caea0ca596766370283be8d43e15
SSDEEP

768:nWqN+JfdN8pT30nE3HnBPENIkCQrg//mkbAGSa:7+7NCT3wQBPETCQG/hbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0feda882076fe53a550a8419accc8448

Files

0feda882076fe53a550a8419accc8448
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 64KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ