0f5069dff53423ea4e5f591a4fe819ed | Triage

Sharing

General

Target

0f5069dff53423ea4e5f591a4fe819ed
Size

260KB
MD5

0f5069dff53423ea4e5f591a4fe819ed
SHA1

25e1f42b707a59da2b5d549f3ee123d32bc85895
SHA256

b6854965fab46c51a0350a8d9fb21f0797f872ae3e96198829306373d594dd71
SHA512

a59517cc900299cd352c281263780fc7126577b83b8600aac8af0cd99d1ee987dc6080c0a84a9d5b75cc92dc7446e2eba68a34b735b6d92d8c61684fc1f7951c
SSDEEP

3072:N1SIY9MlJpd157vzjjhy3SzSygCQjQqyH8GSI7jOExlUBgFqPQrXjA61u2+TKa69:GIUMLzLjI6OC3cPI7BqofNrfr/ncW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5069dff53423ea4e5f591a4fe819ed

Files

0f5069dff53423ea4e5f591a4fe819ed
.exe windows:4 windows x86 arch:x86

ef356126ab0ed9dc89e187d097db7021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
SHCreateDirectoryExA

msvcrt

free
malloc
fclose
fopen
_c_exit
_exit
_XcptFilter
fwrite
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
sprintf
isdigit
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
atoi
div
isalnum
isalpha
ceil
_cexit

kernel32

SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
SetFileTime
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ