0ea55aa48e95321020279acc0a6ed81d979431e6344b68fa34d932c0cbaa015fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea55aa48e95321020279acc0a6ed81d979431e6344b68fa34d932c0cbaa015fN
Size

26KB
MD5

5b40924e493ef31cda995c57430d47d0
SHA1

624993c1d9fe0c32902b6f3aa027c7f84f1bc2e6
SHA256

0ea55aa48e95321020279acc0a6ed81d979431e6344b68fa34d932c0cbaa015f
SHA512

ecbd5e325d75a654cf5659915f8591eaadd8d6142f843c8de4e8087983c639266b23d9144389bca196763be837569d5c8cb76fa97ca1e3ac0e7792a6b8e7d966
SSDEEP

768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjWeMmWOgl6:fM3fiXjWjmgl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea55aa48e95321020279acc0a6ed81d979431e6344b68fa34d932c0cbaa015fN

Files

0ea55aa48e95321020279acc0a6ed81d979431e6344b68fa34d932c0cbaa015fN
.exe windows:5 windows x86 arch:x86

2e78d2633923e668c6d4cf1636ec5a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
PostQuitMessage
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
CreateFileMappingA
FindNextFileA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ