0f2d6bea067025384df6fe0d6cc6476a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2d6bea067025384df6fe0d6cc6476a
Size

64KB
MD5

0f2d6bea067025384df6fe0d6cc6476a
SHA1

5a87f8c9b05350ba5ba6901288a475b3452ead50
SHA256

3f4885ce36e9694be63eae22ca66f5494273277a27773f70a9c2a62009acae35
SHA512

ad7caff7fdc4b45ab34b21adba452fa8a32eae9afd8a0e29ef9b5ccee14438d310986ea6f1bc9fef2359afe592e2dae63c22add913cdf56d6ca274d7964d7016
SSDEEP

1536:7+uz4cLC5FWHv0hCiZI/MJSkCM47XDJYKX+a4wQLGIkBceV:7NznW5MHvu9K0UkCVX/X+61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2d6bea067025384df6fe0d6cc6476a

Files

0f2d6bea067025384df6fe0d6cc6476a
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE