0bc89191c3751fbce7b1270cbb363949 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc89191c3751fbce7b1270cbb363949
Size

92KB
MD5

0bc89191c3751fbce7b1270cbb363949
SHA1

916c783ac38e08051c90edba0ab5aa92ad4dde71
SHA256

48070331073dd23fb5316ea9dde1376eeb0e0acf775a46be21776a197a078400
SHA512

e13dd87bcf05d56cbf99d51b5b61000f5f098edd013df29632acfc7abca9c6a131615a0ad188d05d1d70933b682fe07264928d80723d009cb330613aeb0d54c5
SSDEEP

1536:n/qejVV+xmg/YY+zdqzg36h7ctsXrKvEZffT5uZC287DuqG0zbpcvlXB:nypcg/Yqco72sXrKM9T5ukORoevlx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc89191c3751fbce7b1270cbb363949

Files

0bc89191c3751fbce7b1270cbb363949
.dll windows:4 windows x86 arch:x86

72d1e71466ba852ac973441e80f78a5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadMenuA

advapi32

RegQueryValueA

Exports

Exports

cbckwwqwn
jdwycybbyr
yc

Sections

.text
Size: 87KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE