0a85f465aaec61020958927e88497c794c1c9bdf6b02209367f8aefab46d2099 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a85f465aaec61020958927e88497c794c1c9bdf6b02209367f8aefab46d2099
Size

24KB
MD5

4a9db2e70a32fb86e27a52de49fad997
SHA1

f7d491a0680b2ece0779168eadfde6585f863833
SHA256

0a85f465aaec61020958927e88497c794c1c9bdf6b02209367f8aefab46d2099
SHA512

6eb9ad1b25adf4f28fac0ceaaad5788f198a9f40af5e48547bb2fb0a7e0d975b3afcbcb45d3c62b9cec7d3ebeb7323b7501d172884dc61d806b95162d7a03482
SSDEEP

384:FGHHn3ltfpibE9aPX1Zcbea5v2IJ9boHsSAL68xh/9bRtjBD:FGHH3bUQ9QFZcNB2ScHvar5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a85f465aaec61020958927e88497c794c1c9bdf6b02209367f8aefab46d2099

Files

0a85f465aaec61020958927e88497c794c1c9bdf6b02209367f8aefab46d2099
.exe windows:4 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE