0fb036f76234f322bd6a981cdbb897cb | Triage

Sharing

General

Target

0fb036f76234f322bd6a981cdbb897cb
Size

24KB
MD5

0fb036f76234f322bd6a981cdbb897cb
SHA1

c76d3515c2247a77c9de4cd99e85aff22382a7cc
SHA256

f87c3dfed693450eebe343ee89c5d183679682593cbe7a36b6d7505dd6c8d44f
SHA512

2065bfda1e6d6d36b88bc21b26a3bc86ea7ec00882f24cd8271cb7d687b07afad87ecd31601798ee8131682b537cb20e8d9cd4b9c1e6bd44643520f0d29f32bf
SSDEEP

384:11NLaP1Hxc1CWYVTpxezqsmDaqw1kifFANJg/Tz07IM4BF:115S+JYD+qsmDaqw1kiNAi7BF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb036f76234f322bd6a981cdbb897cb

Files

0fb036f76234f322bd6a981cdbb897cb
.exe windows:4 windows x86 arch:x86

b7a01c71edc3f428af7f232e1f01b637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE