0fa796b1a8a115f439d4b17788b44af3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa796b1a8a115f439d4b17788b44af3
Size

107KB
MD5

0fa796b1a8a115f439d4b17788b44af3
SHA1

187c2dcffd6c362bd14f815748262593510a3b28
SHA256

03d4d3bc3eee9731f4d654aa92e0a4e061fbf96f2c8a1d41317d0bab47bb4bb4
SHA512

973fcea58b8fc0a79c91b65ef63b7952707ffd2d9be7c9fe75aabd1af1888ccfd4cfb3987ba64b1e1244c2dcffad261e73b1b063cc547b63e7a3217afe30bb57
SSDEEP

3072:Y+1WA4P6+E0kVgCxPVrAFyc3FkfJiWCBY:Y2WTBE0k1V8s0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa796b1a8a115f439d4b17788b44af3

Files

0fa796b1a8a115f439d4b17788b44af3
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE