0ec91314239fea5fe571b6369dfd75e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec91314239fea5fe571b6369dfd75e3
Size

158KB
MD5

0ec91314239fea5fe571b6369dfd75e3
SHA1

65544a82ad96920973294cf1ad41f792d436258a
SHA256

cb76cc76b644c131fcd6a55a1d6fb9275dcd94a203907e4529cfd96ff1968e4c
SHA512

3141af9f1f41942951ff313e03d824f2b27ece60bf1f81d979d448c8fef3bd084b8332dd820458a68082c8a92b3e165f2aeea2d1bb5b146add9d50862958d1f9
SSDEEP

1536:l5AMrUUxCuq22G0qaODOjBjfXZOCQLz7YX:XJwjODKZgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec91314239fea5fe571b6369dfd75e3

Files

0ec91314239fea5fe571b6369dfd75e3
.exe windows:5 windows x86 arch:x86

9f7306138c515d2aa976d2ad60c42aa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
AppendMenuA

kernel32

ExitProcess

advapi32

RegLoadKeyA
RegQueryValueExA
RegCreateKeyA

Sections

.beihn
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gigjj
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bhlb
Size: 84KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obla
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ