e0dbedc61f0d76357614b4a9047d8292 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0dbedc61f0d76357614b4a9047d8292
Size

56KB
MD5

e0dbedc61f0d76357614b4a9047d8292
SHA1

3cb8a7b9aca63cbe45ec46d0cf37132a58509032
SHA256

f02582a0ea404c5326a28018f048fa8023f6e16867702561b7819a672c69b53e
SHA512

75047e261a65ab9a49f1cb8db738915dbf8525d33ff1edb687eba94d021fca7547145c792d9794c9593e8f79cdb3a0b1131ba45ca117d9db0695dd37616cfc20
SSDEEP

768:TCgcOzLMPXklGOoLR2b/ZqVcRDmrMZtVw2G/VTT4X4Z2IsaxZt0CiMVjVKb:TC7OzLMPXkQOomhjHNGtH4s27Q7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0dbedc61f0d76357614b4a9047d8292

Files

e0dbedc61f0d76357614b4a9047d8292
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE