Ofepari_ct[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ofepari_ct.exe
Size

230KB
MD5

c55569ef6fcf3608aa4e328549085fb6
SHA1

fea1b19b30ca3cdd73080098d2a76bd11e9d4266
SHA256

c18fb59b7cd6b7bb35bff64f646b39979bf42143097d40950e72b3dbde1b6e4f
SHA512

6df8fe4698cf3cf10e4153e35cd172322ef7d3f74f870414b2248a09c086d83a4750e360c5dac230f5220b150b198df5f78445def86dd0a3396192a5237f0358
SSDEEP

6144:h/yJnrNsp6+xCCPfWQORHyAT2lMtAIGh074D8yf:Jy5r6p6oZPfWQORHfTc83Gh0sD8yf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ofepari_ct.exe

Files

Ofepari_ct.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ