0f1891a9b66dc1a10783792a76e1d6bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1891a9b66dc1a10783792a76e1d6bf
Size

9KB
MD5

0f1891a9b66dc1a10783792a76e1d6bf
SHA1

d17ebbc29802fea660b3072d7d58072094eb4295
SHA256

9bbf40df7cb974c88314e9fb1688b4217cbd083fbfac9fe1c3ae406e28cef465
SHA512

80711816d131cf9c9bd0fdc601d61c4f9af37a2a9283a04b0efbb99efb237bfaf848c10e68cae703bb762f60ac59fdcc195f61c6977083b91f8286cebc1389ea
SSDEEP

192:XmUMcPXbE7IM4j2EYebUeoCbiblL1/wV7Ua6:zZA7kXYeQeclOFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1891a9b66dc1a10783792a76e1d6bf

Files

0f1891a9b66dc1a10783792a76e1d6bf
.exe windows:1 windows x86 arch:x86

98f5b6c4ca40512dca6a4023fea7d049

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_CIlog
_Strftime
__argc
__argv

urlmon

CopyBindInfo
ZonesReInit
DllInstall
DllUnregisterServer

comctl32

CreateUpDownControl
DllInstall

comdlg32

FindTextW
FindTextA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE