c0cf5063f6553b8f9c09fe998766ddabb1d431f5d2b5e150412c55c82bbeae5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0cf5063f6553b8f9c09fe998766ddabb1d431f5d2b5e150412c55c82bbeae5a
Size

23KB
MD5

df1fe979fd348f46f399f7c1249d9b42
SHA1

086fb41a8b0143f4ad28cdd0b07687f0f6f4f762
SHA256

c0cf5063f6553b8f9c09fe998766ddabb1d431f5d2b5e150412c55c82bbeae5a
SHA512

d3016b63e0d87bd3e8d2c7e367886dc1d6b3e8caec2dcb688c01b53ac61850175556806b6359445040acd2a67e2a0ab1fa9652dda387541e04013ba738785d68
SSDEEP

384:XYDkqvp0RzkDdHv0qX1DBo8Y0r1tVaNwQUoCbtvUH/2naMZKDEeiToNhBU3d:XYDHHvxFqVMzOrJwtvUH/2rNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0cf5063f6553b8f9c09fe998766ddabb1d431f5d2b5e150412c55c82bbeae5a

Files

c0cf5063f6553b8f9c09fe998766ddabb1d431f5d2b5e150412c55c82bbeae5a
.dll windows x86

619c2605d0e0ce57752516284715e458

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

ImageList_ReplaceIcon

user32

MessageBoxA

msvcp80

?uncaught_exception@std@@YA_NXZ

msvcr80

vsprintf_s

Exports

Exports

dcGetInterface

Sections

.text
Size: 14KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE