0f332909b93d4a62029a5b078331a30a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f332909b93d4a62029a5b078331a30a
Size

5KB
MD5

0f332909b93d4a62029a5b078331a30a
SHA1

fa87c5928b4ca490381a3d4dd6989748bb71b4fe
SHA256

2a4a2d9899fb4119cd3c3e233f3c0209992371730541af47d82756b16b785d0f
SHA512

1cd29dbc614d71f1441a45c772fef3e96eaaede6046643a1778245d6cf21e7ea3517ade35d8ba24f60d13357d59625956d376fc7065619aadbe34369b555ca9d
SSDEEP

96:i1MMl3m6d2FGY26hZzoP3M3B/OpL0OOBIp6xmi:iHJm6XYDoPGB/aL0OgIpMmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f332909b93d4a62029a5b078331a30a

Files

0f332909b93d4a62029a5b078331a30a
.exe windows:4 windows x86 arch:x86

fe60725abe41f30668bbf1ce1ce43f3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
lstrcatA
lstrcpyA
WideCharToMultiByte
WaitForSingleObject
CreateToolhelp32Snapshot
Process32First
CompareStringA
CloseHandle
GetFileAttributesA
GetModuleFileNameW
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

ShowWindow
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE