0ef1bdbcec815da218f23b569a6ab25a159d42fb45e0ab8c656aa02111b9e04eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ef1bdbcec815da218f23b569a6ab25a159d42fb45e0ab8c656aa02111b9e04eN
Size

66KB
MD5

19b8a0cebb93b878e7e11bf1994aa350
SHA1

0bdb52c3b69089c2b3e77a2141b783f072bcba43
SHA256

0ef1bdbcec815da218f23b569a6ab25a159d42fb45e0ab8c656aa02111b9e04e
SHA512

e664319cbb455ed522fe9988d141b08af1b9641e3dd9c0fea0696421d064578102f391d709bd472a284fe6d027403da7d116a307bbdf0f3c819263fb228077f7
SSDEEP

1536:/+JYNxdXEjC8hSUNKfv2faimpgH21j3M5fd1gCYN:CPC8hSUwfvQamSMZfs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef1bdbcec815da218f23b569a6ab25a159d42fb45e0ab8c656aa02111b9e04eN

Files

0ef1bdbcec815da218f23b569a6ab25a159d42fb45e0ab8c656aa02111b9e04eN
.exe windows:4 windows x86 arch:x86

f830621c43c3d8c6e648f06002430e68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
CloseHandle
HeapCreate
GetDiskFreeSpaceW
GetFullPathNameA
GetEnvironmentVariableA
GetFileAttributesW
GetModuleHandleA
LoadLibraryA
CreateEventW
CloseHandle
GetPrivateProfileSectionW
WaitForMultipleObjects
GetFullPathNameA
GetCurrentDirectoryA
GetConsoleTitleA
lstrcmpW
lstrcmpiW
CloseHandle
GetExitCodeThread
GetVolumePathNameA
OpenMutexA
ReleaseSemaphore

certmgr

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.zdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ