c0a07577e129e362a8e0b48536f09d7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a07577e129e362a8e0b48536f09d7d
Size

38KB
MD5

c0a07577e129e362a8e0b48536f09d7d
SHA1

2e4f0feab1ff31c7a36b9cf9b154b00afccf4f2a
SHA256

e0e49cef1393a05ab764925086365b6ec89cdaff1f6db767c4a805ab12a274a6
SHA512

36bbe942ef92a94db52740b7620da4103b6b06ff98c478e5f6e0a544ad7fd4d770ad39763eb9bda72e533fd71162191c29b93d8d881ad860428caaeaf4cb4fff
SSDEEP

768:0MZxpb0l3tnBJ65wGAVzvJt7zyE3w5ujz64G5:0MLqldBPGA5RpyP15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a07577e129e362a8e0b48536f09d7d

Files

c0a07577e129e362a8e0b48536f09d7d
.exe windows:5 windows

ec5885042cc2b33d72a078126ecee5b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DrawTextA
EndPaint
GetClientRect
BeginPaint
DestroyWindow
DefWindowProcA
PostQuitMessage
PostMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

FindNextFileW
GetModuleHandleA
LoadLibraryA
FindClose
FindFirstFileW
GlobalSize
SizeofResource
CreateThread
WaitForSingleObject
GlobalAlloc
GetStartupInfoA
Sleep

comctl32

InitCommonControlsEx

msimg32

GradientFill
AlphaBlend

crtdll

_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
__GetMainArgs
_acmdln_dll
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ