0c4fa76bf26efb9b7b6fbeec665b1d59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4fa76bf26efb9b7b6fbeec665b1d59
Size

3KB
MD5

0c4fa76bf26efb9b7b6fbeec665b1d59
SHA1

b8d628cf7449a5ccbe68abb3e979d2dbb71b3bd0
SHA256

2d094527f95eba14bb4ff67bc4b41dae710dc4a9a1c8089646c7d0908ff124b2
SHA512

b1f8142fd1f72f8c7a5fba9947df9c5c6ac52c72a1a9c166caafbfe1b5146e8db7418da8e415413042d3064de4f382306e30f8ea73f964293289503bfa0b72e7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4fa76bf26efb9b7b6fbeec665b1d59

Files

0c4fa76bf26efb9b7b6fbeec665b1d59
.exe windows:4 windows x86 arch:x86

8e0890cd29643509891174d00643b732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

kernel32

SetLastError
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
VirtualAlloc
GetTickCount
GetModuleHandleA
QueryPerformanceCounter

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ