ZOCHdxNQ[.]cpl | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZOCHdxNQ.cpl
Size

1KB
MD5

b3f085975c6c718215d9b1caf1f135c6
SHA1

03d6cfc75afbb2dae735a493ec63925d682df9eb
SHA256

066e0f00d7bf409e0d2e7346ca3aec6de40d9cdc15f1c4a2a7d38030a10c9905
SHA512

2562d35a8e95f0011ede64848999b013bc7ae7b0a05134b17fdb0da1b1c41cf89434606b4c6f0ac66cf093d17b287969ef4de706fbf73146d811483818e7b2f4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Device/HarddiskVolume9/RECYCLER/S-3-5-01-4621304173-6055156028-813125507-4057/ZOCHdxNQ.cpl

Files

ZOCHdxNQ.cpl
.zip

Password: S@ndb0x!2023@@
Device/HarddiskVolume9/RECYCLER/S-3-5-01-4621304173-6055156028-813125507-4057/ZOCHdxNQ.cpl
.dll windows x86

Password: S@ndb0x!2023@@

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
manifest.json