0edfbed4191c55fb555882a18e5d8e0968262b1e8ac6b9034dcb4b8fb52ee256 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edfbed4191c55fb555882a18e5d8e0968262b1e8ac6b9034dcb4b8fb52ee256
Size

38KB
MD5

544b60ac05ab33e5f0500fcb8876294f
SHA1

96dc3d3c7cb4e88cecfa9a26cdbeb7bf51687c0d
SHA256

0edfbed4191c55fb555882a18e5d8e0968262b1e8ac6b9034dcb4b8fb52ee256
SHA512

4e5d58aa401669cc3760d1584d5258119ea4ed3a23abc115e553896c1995df1c1d9db6483a0912af2efe89f37fc425492f098b98164f7bce6af3281adf29b2ce
SSDEEP

384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yDt:MApQr0LvdFJI34nTkIU0EyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0edfbed4191c55fb555882a18e5d8e0968262b1e8ac6b9034dcb4b8fb52ee256

Files

0edfbed4191c55fb555882a18e5d8e0968262b1e8ac6b9034dcb4b8fb52ee256
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE