a0f0d5ac13dccc5b457f6057b813d247 | Triage

Sharing

General

Target

a0f0d5ac13dccc5b457f6057b813d247
Size

142KB
MD5

a0f0d5ac13dccc5b457f6057b813d247
SHA1

f20b0570cd774aad38c3e14dc8570b18a0c49238
SHA256

e483a7ed8ea01759a8fad7dae577740ae439d4f78e913110359665917d697555
SHA512

a5eb02b04ab60edb9a6c98bf3a2b0e600337a7063098799d7b94ca7558a7a061837b58c70c0581154db6a2cf5e09a2e117072275d4004ac7b21bb7f3dca0e145
SSDEEP

3072:CDVlTrIbhzJ4xhTqXhgJOZxBBCYsffqoUVYd:CDLqGJKzP2fqou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f0d5ac13dccc5b457f6057b813d247

Files

a0f0d5ac13dccc5b457f6057b813d247
.exe windows:4 windows x86 arch:x86

418663e1916b4252aee3e1ce5c9575c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCySub
__vbaExitProc
__vbaCyAbs

user32

ActivateKeyboardLayout
CharUpperA
DrawMenuBar
EndPaint
LoadCursorFromFileA
LoadMenuA
SetCursor
ShowWindow

kernel32

lstrcmpA
GetDateFormatA
EnumResourceLanguagesW
GetModuleHandleA
SetCurrentDirectoryA
Sleep
lstrlenA
GetFileSize
TlsSetValue

dinput

DirectInputCreateW

ole32

CreateFileMoniker
OleUninitialize
OleSetClipboard
OleInitialize
OleFlushClipboard
GetRunningObjectTable
CreateDataAdviseHolder
CoTaskMemRealloc
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

SystemTimeToVariantTime
VarFormatNumber
VarI1FromStr
VarI2FromDec
VarR8FromCy
VarUI1FromUI2
SafeArrayAccessData

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ