c0e9dca4b2a9f856fd33cf7b1ef1a5d1 | Triage

Sharing

General

Target

c0e9dca4b2a9f856fd33cf7b1ef1a5d1
Size

393KB
MD5

c0e9dca4b2a9f856fd33cf7b1ef1a5d1
SHA1

54a037b25782db9ebde5b86c242445158457818a
SHA256

9f260f577bf1497320fdb774295b8ce6936811b6cb5564385b5753181b367ab7
SHA512

9ba03cc0dbd386f96fc61f443dffbf7632499234710e70b7773a436f524f5a742989b0658a596cfc332d7219ae3ada0592d4b67f49eacbbbe61b55450949eb35
SSDEEP

6144:ajrmef7o5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnDjzmmnA:ajaeDQnhxUUSbuGFehOsuC8XmklbqmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e9dca4b2a9f856fd33cf7b1ef1a5d1

Files

c0e9dca4b2a9f856fd33cf7b1ef1a5d1
.exe windows:4 windows x86 arch:x86

b4c0e247b83f1334e879e8d8b5ab2d45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SignalObjectAndWait
CreateFileA
Sleep
FindClose
CreateMutexA
GlobalLock
ExitProcess
GetModuleHandleA
LocalFree
GetConsoleCP
HeapCreate
CreateFileMappingA
LoadLibraryExW
CloseHandle
FreeEnvironmentStringsA
GetACP
GetLastError
GlobalUnlock
FindAtomA

user32

GetFocus
CallWindowProcA
GetDlgItem
IsWindow
FillRect
CheckRadioButton
DrawFrame
GetDC
DispatchMessageA
CopyRect
GetIconInfo
DefWindowProcW
DrawEdge
MessageBoxA

uxtheme

GetThemeRect
DrawThemeText
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ