0b574a4b7bbd06f873c11e7122a0a49042c33d291f39443e945f82478bff7405N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b574a4b7bbd06f873c11e7122a0a49042c33d291f39443e945f82478bff7405N
Size

30KB
MD5

8b6504d8ca6a48992a219710463d6b60
SHA1

97d9d2b67a691c585757bdddde1d00b2d640a492
SHA256

0b574a4b7bbd06f873c11e7122a0a49042c33d291f39443e945f82478bff7405
SHA512

37019eff201b5c27801771ab215828941359bb4a98153f46a3b0204cea2735fa3346c95526b7b93d15846fc274ba44968f28d25719b839e7368dbfea8e113d08
SSDEEP

384:c53R1c+IjXuly7o3qktHQpQfCedIBCIhxBRrOy6xq0fAe+I6sO:6uzXu08q5/ONq0fApTsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b574a4b7bbd06f873c11e7122a0a49042c33d291f39443e945f82478bff7405N

Files

0b574a4b7bbd06f873c11e7122a0a49042c33d291f39443e945f82478bff7405N
.exe windows:4 windows x86 arch:x86

71f440eb52534bf844b9bfe86da53e20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcA
CreateWindowExA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

ExitProcess
HeapAlloc
GetStartupInfoA
GetCommandLineA
SetFileAttributesA
GetModuleHandleA
lstrcpynA
lstrcatA
GetCommandLineW
GetTempPathA
CreateFileA
SetLastError
LoadLibraryA
GetProcessHeap
CopyFileA
SetEnvironmentVariableA
GetStringTypeA
GetDiskFreeSpaceA
IsValidCodePage

gdi32

CreateFontIndirectA

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ