0f10bd71d1d127862148809e3df661db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f10bd71d1d127862148809e3df661db
Size

18KB
MD5

0f10bd71d1d127862148809e3df661db
SHA1

49a5181ccb5f7fe03131b23c731d6bdea5f45bb9
SHA256

419942f97ac51c64c9b216899c169a91eda94cdf38c6acf1bdd39ef8af28294e
SHA512

d2c15a0de6b9dfef3f318aa196fe0fdb0b3bf32521c856d0cd99e13408c916574a8e88105db027643eb2599a5e046a4c5297dd8f656f206dd64dbefc2afe136f
SSDEEP

384:0l31g1F4nkI4QTI4YuHYhcSJm/rufJWTItB+H1A0Hn8SYeo:KFa8XBYeUKruRAoQC0H8SY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f10bd71d1d127862148809e3df661db

Files

0f10bd71d1d127862148809e3df661db
.exe windows:4 windows x86 arch:x86

e83fbde030665f4a55aacec5e2ee2686

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCurrentProcessId
Process32Next
Process32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ