0bfd18cedc285f29e5055556313c6e27 | Triage

Sharing

General

Target

0bfd18cedc285f29e5055556313c6e27
Size

244KB
MD5

0bfd18cedc285f29e5055556313c6e27
SHA1

c6e86e7ecc6329e6c5b7a4328e306be94b507337
SHA256

e5ed4d405bd10231b347710bd088f2699792008d2ec4d6e9c0891faf4f06501d
SHA512

effe68e9cb4c7303e8d0517ed00ed79b675614f63f9626aa9ddf81966fc7b02b0e88394e21393850b02ba1150cb7750f57e873be8691184312f3974e33759b7d
SSDEEP

6144:avmkOy/RA3cIFlTpVwknxahH+wLyFT7ifO+pr2fk14BNcDypx:ymkOy/6vFLtxaB+jZb+pr1WHcDypx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfd18cedc285f29e5055556313c6e27

Files

0bfd18cedc285f29e5055556313c6e27
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ