0a1b83c79b037cf56476058f431aea7a4973c689334b89b2c80fb27f1d158d9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1b83c79b037cf56476058f431aea7a4973c689334b89b2c80fb27f1d158d9d
Size

63KB
MD5

45f5dea8ed35b25930aaf282c7480b16
SHA1

c20486a2126196b35778f025bd7f02c569c47488
SHA256

0a1b83c79b037cf56476058f431aea7a4973c689334b89b2c80fb27f1d158d9d
SHA512

d7c5e4632e4d029901b6c493a7807e89ec2cf4e3e67d67df06ea3c23f458feb5c3aa6f56add870ba15eddb9fa9c495f1587aa8dcca87b682b1881b796e2ff1e2
SSDEEP

768:zTAiYUVaQDKVSputCPsED3VK2+ZtyOjgO4r9vFAg2rqcjeZ8GswSD/E20E:HAqamKwugYTjipvF2PeoE2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1b83c79b037cf56476058f431aea7a4973c689334b89b2c80fb27f1d158d9d

Files

0a1b83c79b037cf56476058f431aea7a4973c689334b89b2c80fb27f1d158d9d
.exe windows:5 windows x86 arch:x86

b54757880e34d193f6c36b5f50a2be11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

CreateColorTransformW
CreateProfileFromLogColorSpaceW
CreateDeviceLinkProfile

gdi32

SetWindowOrgEx
GetWindowOrgEx
CreateDCA
CheckColorsInGamut

kernel32

ExitProcess
GetConsoleCursorInfo
GetProcAddress
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ