a0f0bf3902f668cf5851aaa6bb3ec44b6d974a4298ecc48a022e72cac2d6dd39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f0bf3902f668cf5851aaa6bb3ec44b6d974a4298ecc48a022e72cac2d6dd39
Size

7KB
MD5

b20db1e3003a369cd0df2d1dd965421d
SHA1

67e963935d2c07fbd46e3ee4f6e396b7703c3745
SHA256

a0f0bf3902f668cf5851aaa6bb3ec44b6d974a4298ecc48a022e72cac2d6dd39
SHA512

605e720b471d89907317dfc85973509bb1f432210cd03cd9bb462b3e85201bf9a35fac52666640061308cb66bdbf4aa549cadf55cbc5c3ec515df06a513ef307
SSDEEP

96:wb4VHccYJUC/aFbz/j0OvaPmd3cX5aXW:wUaJf/aFbP0Oh2JaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f0bf3902f668cf5851aaa6bb3ec44b6d974a4298ecc48a022e72cac2d6dd39

Files

a0f0bf3902f668cf5851aaa6bb3ec44b6d974a4298ecc48a022e72cac2d6dd39
.dll windows:1 windows x86 arch:x86

f226b826cd84e9d22f32db364ed41df6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
GetTickCount
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
srand
strcat
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 168B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ