0c5df26cc88f0774c779198c23e07f44f6f01f6fe2bc8fa730743629a3b6da38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c5df26cc88f0774c779198c23e07f44f6f01f6fe2bc8fa730743629a3b6da38
Size

28KB
MD5

cfc13344e2c56605e8c5619e226c5ea7
SHA1

35e4128cf8501b3c0b7125c2cca76305f8a4fad7
SHA256

0c5df26cc88f0774c779198c23e07f44f6f01f6fe2bc8fa730743629a3b6da38
SHA512

8f83b53ee4096c81e2149c40be6b5f3e99e29a6a0dd6d5458242606c89ed4b7550fe97e99208fb0e9ed38f3623904bdbb2745f1f634a4ee96744926c4ce84555
SSDEEP

768:mB5MVX5wjajojBVlayXdYAnazt+/PFqfzApazntGagOgl:mBmVOjajo1rayXdYAnazt+/PMfzApBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c5df26cc88f0774c779198c23e07f44f6f01f6fe2bc8fa730743629a3b6da38

Files

0c5df26cc88f0774c779198c23e07f44f6f01f6fe2bc8fa730743629a3b6da38
.exe windows:4 windows x86 arch:x86

3392ca16add253470d7ff79ff5ee1046

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

DefWindowProcA
FindWindowA
GetMessageA
CreateWindowExA
GetForegroundWindow
ShowWindow
RegisterClassExA
PostQuitMessage

msvcrt

fopen
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
strchr
??2@YAPAXI@Z
srand
time
atol
__p__fmode
sprintf
__CxxFrameHandler
fclose
fwrite
rand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ