0f6a4cb3f6eb8355b517e75c3bc24fed | Triage

Sharing

General

Target

0f6a4cb3f6eb8355b517e75c3bc24fed
Size

22KB
MD5

0f6a4cb3f6eb8355b517e75c3bc24fed
SHA1

f71fd5201601b4c778e0e41a97df6ba0392f7334
SHA256

b460dd5de259d0afef401a652fff3c17e8cbb4b48bf2a5106a54408699d14319
SHA512

90b88cb8899d7623933c074314b482d05ed72d05a9e8f935a541d7b835a193e29ead43266d0c61a9ad47995dab381eb4446912a1e291d3c1cbfb7c90b2d3bc30
SSDEEP

384:mQppXxQ0E3WvtyM22jiLREFUP/qsBNre7yRo57ET7M1M5rNbniVuv2vf/6:f5xtcWFnFiLREyje7yq4n5Rbndufi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f6a4cb3f6eb8355b517e75c3bc24fed

Files

0f6a4cb3f6eb8355b517e75c3bc24fed
.exe windows:4 windows x86 arch:x86

c2022d59063a3bee3e08b0792cf5ab79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

DisconnectNamedPipe

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ