0f7a1a9b9855a8898e2845740488ad91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f7a1a9b9855a8898e2845740488ad91
Size

207KB
MD5

0f7a1a9b9855a8898e2845740488ad91
SHA1

60fecc99e2fde75bfe7b3d0563d6202352a12b5a
SHA256

645987fac12d92d9d2bd189d1295ed51a0afaca1b15c83015b5694c9b6d0d214
SHA512

4340dc701b20205d3207997532ab8104e92dbe4e42bf5e05dd21bbab59b357a63df3efc2364f6db9a672f860c97e05c971e621ef2250ff982245f46a718d86fc
SSDEEP

3072:BW4XyaJZzpD+NV/fRcbDvUmJI8mJJVIcc2fFGZqTZYlgT/C+xrGyJYjlXwaA5ZT:U4XLLZ+Nt5ivhJIDScc2f0ZDmOXw1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f7a1a9b9855a8898e2845740488ad91

Files

0f7a1a9b9855a8898e2845740488ad91
.exe windows:4 windows x86 arch:x86

df8b8e438d2e2d4ccc3948506c73461c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
GetLastError
SetLastError
GetCommandLineA

user32

LoadCursorFromFileA
ScreenToClient
ShowCursor

gdi32

CombineTransform
CancelDC
GetMapMode

winspool.drv

DeviceCapabilitiesW

msvcrt

_adjust_fdiv
_exit
_controlfp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ