0c0a5c94f9054a71df14c34c8b158782 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c0a5c94f9054a71df14c34c8b158782
Size

19KB
MD5

0c0a5c94f9054a71df14c34c8b158782
SHA1

b9a133058e351eb4170065b1589df5747b9fc1be
SHA256

18730a82d900bb6062263510ab8c58e2e636afc24e55cf5d3ed1e90fb516a486
SHA512

0e4ea4d66d978d0833beb649f6a56c9aa5f5fede5486c80e176b1cb69cb6cc32663675daf947f9a073e28bf5ac5ffb778a629a683c279de55385fdd34817be54
SSDEEP

384:kK1MluQWRREHZlgbPpiimrNcPxuYOx9bjdJlwWalTB:kK1MghRSlkhiim5qxuYIXJwTRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0a5c94f9054a71df14c34c8b158782

Files

0c0a5c94f9054a71df14c34c8b158782
.exe windows:5 windows x86 arch:x86

b1decad0f067131fff2e76ab43787f60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

ReadFile
SleepEx
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrlenW
ExitProcess
DeleteFileW
lstrcmpW
WriteFile
CloseHandle
LoadLibraryW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ