0ff543b1c72e6080f51a713d77b6ef5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff543b1c72e6080f51a713d77b6ef5f
Size

117KB
MD5

0ff543b1c72e6080f51a713d77b6ef5f
SHA1

8d1ee8af5153986eb7aeb6b7f94a0353dcc2f1cc
SHA256

414c49e3913b272f5fb6921483fb4858e0001a88c2b42c92622bd79a9e503209
SHA512

6b52dfe8883969b12aed66d2bfea31cc3a72e56978e2d5e12f2cb9bf596f133fd8ca0e05d9b092b80e7299e9601ba2d805b311b550f0523d05f95d06e83f24cf
SSDEEP

3072:b+dCYixbkgjv1KKPLkDHd9YlpCSTjoZLIWd8Uev2Q6GvkU:beCVbkgjNKOApYNSIWaXvH6GvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff543b1c72e6080f51a713d77b6ef5f

Files

0ff543b1c72e6080f51a713d77b6ef5f
.exe windows:5 windows x86 arch:x86

98f1d7fe5bace5c3e18a807e3fb662c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCurrentThread
Sleep
ExitProcess

Sections

.text
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Utqchndq
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Skjak Rp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bkhtlaru
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eqxpive
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE