0ca475a25fc2394f8181f258e567f7540d803acf876be5d2f5aae8313456fe00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca475a25fc2394f8181f258e567f7540d803acf876be5d2f5aae8313456fe00
Size

7.6MB
MD5

5da4cd31e86cd2c76fc0ebcf86656f4d
SHA1

6a952302f46aebc1e130b84955f52f74abc9b641
SHA256

0ca475a25fc2394f8181f258e567f7540d803acf876be5d2f5aae8313456fe00
SHA512

953c18db0b2d850a1f8ff2483691967b370ed8e1d5ab83b611239cc8567f3fde9432dfbbf51c79ba16cd0ab4687120e3466d4b6da68fb77ca2bbea25a3441f20
SSDEEP

196608:JmZ7+YSfjMyC0lLUgJCYl1YM+kk7JA76euAiU:vfjwCI4l1Arej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca475a25fc2394f8181f258e567f7540d803acf876be5d2f5aae8313456fe00

Files

0ca475a25fc2394f8181f258e567f7540d803acf876be5d2f5aae8313456fe00
.exe windows:4 windows x86 arch:x86

6f3ed0fb1d7c2ae57cc87e1784b158e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock

user32

GetClipboardData

gdi32

SetBkMode

winmm

midiStreamClose

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

RegisterTypeLi

comctl32

ord17

ws2_32

recvfrom

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 6.2MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ