c0a3bd48de922b6af05d5dc0774ca2cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a3bd48de922b6af05d5dc0774ca2cc
Size

134KB
MD5

c0a3bd48de922b6af05d5dc0774ca2cc
SHA1

a8b3d2cef29e58a5c919149b6c3882e9c1ed9d04
SHA256

1c8942884b3321678d3f76a619c0717473b690da5cd483d7ff147baf4ae04256
SHA512

326c1b7dbdf1ad69161e83a6f9ca658f9ad21419b9001df5fd405e3dac4d63dad3e9483e690fb1c3324ab72ea8c2e288daeeac72c896b87dc0b01a98dbb4e2a0
SSDEEP

3072:bD7WInu7vSkykFMTQpMEwfMEqxTAVEm21C9RdUSjO/CT:LsvSkF+QpMEqMEp2I9RPO/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a3bd48de922b6af05d5dc0774ca2cc

Files

c0a3bd48de922b6af05d5dc0774ca2cc
.exe windows:4 windows x86 arch:x86

ed723ba2d6a0e6ae9110bbc4ce94b531

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
ReadFile
FreeLibrary
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
GetStartupInfoA
LoadLibraryA
GlobalFree
GetFileSize
GlobalAlloc

user32

FindWindowA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueExA

msvcrt

__getmainargs
memset
strcat
strcpy
strcmp
free
realloc
_exit
_XcptFilter
exit
_acmdln
strlen
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ