c0eba91aa9bd6d1c6a7130119021dc00 | Triage

Sharing

General

Target

c0eba91aa9bd6d1c6a7130119021dc00
Size

36KB
MD5

c0eba91aa9bd6d1c6a7130119021dc00
SHA1

a29a6edac75a76fb0e082c60fe7df354ec7f5455
SHA256

3f7a7b70c6d539cdd820178003b02c572807ea8c37f34e3822ea0e16824040fd
SHA512

4a9282d1754b8127ebb2c90770f5d3bb3ea2a280d6af2ff054d1d4f47a180726f8cf6cb990a803bae81b99ee0c7ba4b632bbfe15cd36aca010662b7a5818fb4c
SSDEEP

192:Tq4buKupK3kxVvH6HQP1oynE+1pJKEDFhgm/1lHmTAZbebAtMGV18gg+KqR:+bPwG1i+1bfvgm/1lHmzTGf8MT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0eba91aa9bd6d1c6a7130119021dc00

Files

c0eba91aa9bd6d1c6a7130119021dc00
.exe windows:4 windows x86 arch:x86

d4552a4766707a4aace98a194b5848e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__p__commode
__p__fmode
_adjust_fdiv
_except_handler3
_access
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strchr
fopen
fprintf
fclose
strrchr
sprintf
__set_app_type

kernel32

GetModuleHandleA
GetStartupInfoA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetVersionExA
WinExec
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yttkkyy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE