0f0d55cce7176cea534e294d7a8f02e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f0d55cce7176cea534e294d7a8f02e0
Size

83KB
MD5

0f0d55cce7176cea534e294d7a8f02e0
SHA1

7514da04d77ee9d1557df4c1ba7fb3b6d56dcf37
SHA256

6d84d25575743478d7d6613faf7fc20f8f183b2789d78377ee9b7ba9a04642d7
SHA512

c0f5f2ec405b7ca0f261c192d4678ef6ac6cfb01de491beabdde1632ff4cf6c5cffd225c34e185ea60d64890b4691771d97f9e159653efe0e6f9be897e5dff67
SSDEEP

1536:+YxsxRI6mwtCVwvNKH2h7b3wMjc7Ti+GMysDWddK:+YxsrIitg7WhHwx7TtG5sDedK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0d55cce7176cea534e294d7a8f02e0

Files

0f0d55cce7176cea534e294d7a8f02e0
.exe windows:4 windows x86 arch:x86

45a93aa697ca2d88c83465fdcd27e19e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
CreateFileA
GetTickCount
GetCommandLineW
GetDiskFreeSpaceW
ResumeThread
GetModuleHandleA
HeapCreate
CloseHandle
CreateThread
GetFileAttributesW
FindAtomW
LocalFree
GetComputerNameA
SetLastError
SetEvent
GetSystemTime
ReleaseMutex
LoadLibraryW
ResetEvent

user32

DestroyCaret
CallWindowProcA
CloseWindow
DrawStateA
DispatchMessageA
GetClipCursor
SetFocus
CreateWindowExA
FillRect
GetKeyState
GetClassInfoA
GetComboBoxInfo
GetDlgItem
MessageBoxA

cryptdlg

CertTrustCertPolicy
CertTrustInit
DecodeRecipientID
CertTrustFinalPolicy
CertConfigureTrustA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE