0f132d247c4f8735e851eb3053fa227d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f132d247c4f8735e851eb3053fa227d
Size

32KB
MD5

0f132d247c4f8735e851eb3053fa227d
SHA1

b75ca3393956ced45cdb6229526aeb95321c44f2
SHA256

effb2969171383a28b4b4a9fd4f364999b5b0fb40a27e733f0f5bda6789987c7
SHA512

b22a7b11e1f75f5fba87321526e1fb15928edd4ed37a4d02ed4b77d82daa3fd10218c770d6440fbfac1d0b7805b4b5b1a66dad675bf2426d4bf66cd9832fd988
SSDEEP

768:G4dOI+nuCYxNFwQwYDU1OCz4xqt3SYg2G/8KTfb6BkeYW5Rr4K7b:N8uVxzw13z4xqt3SYRG/5D62eB5RZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f132d247c4f8735e851eb3053fa227d

Files

0f132d247c4f8735e851eb3053fa227d
.exe windows:4 windows x86 arch:x86

3e66537e57b39f6a2eb76a4c0be288bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeGetData
PtInRect
ChangeMenuA
CreateDialogIndirectParamW
AnimateWindow
ReleaseCapture
SetWindowTextA
DestroyIcon

kernel32

GetLastError
VirtualProtect
GetVersionExA
SetConsoleNumberOfCommandsW
GetConsoleAliasesA
QueryDosDeviceA

gdi32

GdiQueryTable
PlgBlt
GetDIBits
DeleteDC

comdlg32

ChooseColorA
ReplaceTextA
ChooseFontW
PageSetupDlgA

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE