0c9c1336d8cc90a1d76ab2ea2792f35d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c9c1336d8cc90a1d76ab2ea2792f35d
Size

80KB
MD5

0c9c1336d8cc90a1d76ab2ea2792f35d
SHA1

b398ad84718f65958d52923c22e11013a21f4655
SHA256

5a6cda49a35edd1c973e5fa8a9367efd9643e75b878be42110ff1ca398e8d7ef
SHA512

aef1bcaa92178a05af066b6bf091294f62613b7ba416b7548db203646f2a106786924c28450b7083013241720e0b25c71004a2952ef8f6ffa3999191fe5c4a53
SSDEEP

1536:FVF1W7MXpJjhpHIIauPev3G+4bNNLtpa+n0mFaD82hW8fPL:FVnWQXpJBfmv3G+uNhpVZy8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c9c1336d8cc90a1d76ab2ea2792f35d

Files

0c9c1336d8cc90a1d76ab2ea2792f35d
.exe windows:4 windows x86 arch:x86

89392a9ea9c9cd86298a198f11624c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeactivateActCtx
OpenWaitableTimerA
GetThreadTimes
QueryDepthSList
ClearCommError
GetBinaryTypeW
QueryDepthSList
CreateWaitableTimerW
CopyLZFile
SetConsolePalette
EnumResourceTypesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE