0c0c38134875c72afde26826cd71d3c4 | Triage

Sharing

General

Target

0c0c38134875c72afde26826cd71d3c4
Size

175KB
MD5

0c0c38134875c72afde26826cd71d3c4
SHA1

f72965ef856be9cc8f3264cfd818d223f66f3f2c
SHA256

ccde7438b5015713fef79809dd2fa46a1cd2ee5f81f53b322f3ec716dc6e4e38
SHA512

b7ee826072fa457b2644938f8f863cdb77ef92ba9f7ef91bccedec9f839ecc9e34724531add9b83628209cc76c0c65a03950fb179ec8b523fd561ea0115a1df7
SSDEEP

3072:1nY5bY8XE+kkqh84cKcv4FinaLzL2rVQLOmpvNbTAvfstOr18T:lRAkkk84e4wne2nmhFAvf4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0c38134875c72afde26826cd71d3c4

Files

0c0c38134875c72afde26826cd71d3c4
.dll windows:5 windows x86 arch:x86

038ee71bd4ea63acaf586d3475ef17a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset

advapi32

RegOverridePredefKey

user32

TranslateMessage

kernel32

OutputDebugStringA
GetModuleFileNameA
CloseHandle

oleaut32

VarI2FromCy

Sections

.text
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ