0f74e629a61e742756dd353fa3bae1c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f74e629a61e742756dd353fa3bae1c1
Size

392KB
MD5

0f74e629a61e742756dd353fa3bae1c1
SHA1

47531fb9c84a906857384d311c06f55af0815479
SHA256

833dbf29598928eb5c81291e7e0ab6dadff0a06caa6913586c6247babcbed230
SHA512

aa9c4975090ea86aeecd8a05785c190378854b85b58c57b515fb7fe253c6fe65d5c7acab4cdb6efd7eed0c5a8798f3bbd0cf7ff19cbf631ba93bf4ca80419c69
SSDEEP

6144:VIKQLWRb74iWuusRvGfAtDB35VJOUA0QKLM3s9dp/FuVmjfkm/D:GCVUiWuu3AtDLVJbAeLM3s9ckjff/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f74e629a61e742756dd353fa3bae1c1

Files

0f74e629a61e742756dd353fa3bae1c1
.exe windows:4 windows x86 arch:x86

7790fd6abd4e0b9fe2d66f75aee69805

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
TerminateProcess
QueryPerformanceCounter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetTimeFormatW
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
GetTickCount
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
GetVersion
LocalReAlloc
ExitProcess
InterlockedExchange
RtlUnwind
VirtualQuery

advapi32

RegDeleteKeyW
RegRestoreKeyW
RegSetValueA
RegEnumKeyExA
LookupPrivilegeDisplayNameW
RegDeleteValueW
CryptReleaseContext
CryptGetDefaultProviderW
CreateServiceA
CryptEnumProvidersW
CryptSetProviderW

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ