0c11c779d8d060f582e6c91942beea6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c11c779d8d060f582e6c91942beea6a
Size

32KB
MD5

0c11c779d8d060f582e6c91942beea6a
SHA1

6ed95bda8fe469f2e968c4716877d38b70e7a349
SHA256

9d7ddad8d740aa5995851617499a6a8cb082010aeb922126a17613a52cdd9878
SHA512

d2ca2954179c02b362e39ce752a3d9aa7183834de95642f7856f4a7d6b210131c904e8505c1a0278faaee343bc485bbc5d04f8566eaa18cc15c5a76f80fa5725
SSDEEP

768:ufh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfD:OZ/nEkh8OTKNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c11c779d8d060f582e6c91942beea6a

Files

0c11c779d8d060f582e6c91942beea6a
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrsrc
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE