0bc7e45906114b3c12c5af07551d8f6b | Triage

Sharing

General

Target

0bc7e45906114b3c12c5af07551d8f6b
Size

488KB
MD5

0bc7e45906114b3c12c5af07551d8f6b
SHA1

a33053b333ea1f02937dbd79071e4a0fc248f94c
SHA256

620642e67c3f8d0cfd780865430dea715cf2dd07b27737c676d9fc967007ae27
SHA512

c59745e31f70a8053078d43fe3cca54043045df3cf48c286a4af6d22afe7fa3dfcb998483eedf4d85ee747a58c6d03b976a4d424039c19a06b36634ee8757ac0
SSDEEP

12288:e2P40JXtsmhFW9TSsaFXwS7O7Fd4JE9UEh5o:ey1tsoWUXJi70mOEhi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc7e45906114b3c12c5af07551d8f6b

Files

0bc7e45906114b3c12c5af07551d8f6b
.exe windows:4 windows x86 arch:x86

27bee165fb4d28df4108c7cde170ed1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtCreateSymbolicLinkObject
NtReleaseMutant
NtSetHighEventPair

user32

GetInputState

kernel32

GetCommandLineA

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE