0f71e72c66cb698dfed3251f0633528b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f71e72c66cb698dfed3251f0633528b
Size

36KB
MD5

0f71e72c66cb698dfed3251f0633528b
SHA1

db48b1e94263b1bca9a45b32a52b3b05758feffe
SHA256

7dc40502e2fdd7870dfab95fdb719e9c7aa01f7c20e9a6a131938a8776edeeb3
SHA512

f520b31ee08c0f59dda1162573b00113fee7f245e8304efebbb1301379cf15eeb560f6449bb2f6d573554c6680615a9340918d3fe08517740d825dcdcb125584
SSDEEP

384:QJEKyf3ZE1s4Mphzji0aXIP7Z99JBu5cw:IEPf3VHT97V3Oc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f71e72c66cb698dfed3251f0633528b

Files

0f71e72c66cb698dfed3251f0633528b
.exe windows:4 windows x86 arch:x86

fc75a24ace593fab66484539adf75069

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
FindAtomW
GetModuleHandleA
ResumeThread
GetDiskFreeSpaceW
ResetEvent
LocalFree
ReleaseMutex
GetTickCount
CreateThread
SetLastError
CloseHandle
lstrcmpiW
GetFileAttributesW
SetEvent
HeapCreate
GetCommandLineW
GetComputerNameA
GetSystemTime
CreateFileA

user32

GetClipCursor
CreateWindowExA
SetFocus
GetComboBoxInfo
CloseWindow
DispatchMessageA
DestroyCaret
GetKeyState
DrawStateA
GetClassInfoA
FillRect
CallWindowProcA
GetDlgItem
MessageBoxA

cryptdlg

CertTrustCertPolicy
CertTrustFinalPolicy
CertConfigureTrustA
CertTrustInit
DecodeRecipientID

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE