0c0a0cba74cb8d60a0e77ad6a5166afe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c0a0cba74cb8d60a0e77ad6a5166afe
Size

114KB
MD5

0c0a0cba74cb8d60a0e77ad6a5166afe
SHA1

5ceb0ffd719ae08e1c65241cb1bf11ef9ea7f0c3
SHA256

33d8d54167b5711db5a4ab74bdfa49ff1462ed6a7c0e6d9dfe2915fc328170ef
SHA512

c88818d3d5553d29c4316ca8c6c74f9b6fdeff6b47261f4fc63d9fb7b512dbf26c3271ab8a1081c4b8649d09dff76f1c645acd79ba69183213e164bc2e326a55
SSDEEP

3072:N7fsGPcThE2WEBcyKz8RaB/i+HklNzOvwEJPX/aK:Gq2Vu9zQZ9lNivwwX/aK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0a0cba74cb8d60a0e77ad6a5166afe

Files

0c0a0cba74cb8d60a0e77ad6a5166afe
.exe windows:4 windows x86 arch:x86

3e988e8f8338df8fb36c7c2e4ab190aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
fopen
fseek
fread
??2@YAPAXI@Z
tmpnam
fgetc
fputc
fclose
time
srand
__p__fmode
rand

kernel32

GetModuleHandleA
GetModuleFileNameA
GetTempPathA
FindFirstFileA
GetSystemDirectoryA
GetCurrentDirectoryA
SystemTimeToFileTime
CreateFileA
SetFileTime
GetFileSize
CloseHandle
Sleep
GetStartupInfoA

user32

PeekMessageA
wsprintfA
DispatchMessageA
SendMessageA
TranslateMessage

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ