a0d2404bdeb9a0aa5936c48b47ea84e3 | Triage

Sharing

General

Target

a0d2404bdeb9a0aa5936c48b47ea84e3
Size

100KB
MD5

a0d2404bdeb9a0aa5936c48b47ea84e3
SHA1

52a5ca72fd24abf0d43fca18d8f7cd1560290593
SHA256

aef730ef5de5882b056300927720d0684bc65051cedd55ba9e88f304aee64aa9
SHA512

f1b00034bc6389a910e2376193909e11e5f9604f66b8391ed7d95d39aee90bbfd451fbd5b661bb42d8facfc13d89942e18521f1676b6ebab8fc2df534917b6df
SSDEEP

1536:ItVbczi76W8oNaqzvWWb5MyphLP9oqPLqrLiHO3pcRGq1SrqdMXv0QgW8jXh:ItVb2o6W8oNfvWWbxRmrLiHjwLR8jXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0d2404bdeb9a0aa5936c48b47ea84e3

Files

a0d2404bdeb9a0aa5936c48b47ea84e3
.exe windows:4 windows x86 arch:x86

f6fa93597a4536dfedd81a900d1e9576

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

RegSetValueExA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

shlwapi

PathFileExistsA

Exports

Exports

?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bad0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.bad1
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ