0cb29ec7a9887502d5c78bb3a7959c0d | Triage

Sharing

General

Target

0cb29ec7a9887502d5c78bb3a7959c0d
Size

33KB
MD5

0cb29ec7a9887502d5c78bb3a7959c0d
SHA1

36728fb9c433e2813144c67dc8703dbf2cf7e43f
SHA256

cffdaa3e2b2eed46c88e04707a847cbef068901e9304d214f6b05dd1f3a66f48
SHA512

0c184c3c2eb00083c71b0ccde3b66af4a08dda8319ec583f27970933aef1882c8665b9dbc064c795c4fef1f159ec204d7161a14c41d5c0a6a504ea62ec77495e
SSDEEP

768:h+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEo:h+av6qZ4QxpP0AtNfRJ5BHxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb29ec7a9887502d5c78bb3a7959c0d

Files

0cb29ec7a9887502d5c78bb3a7959c0d
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DLLInjectedAdd
DLLRemove

Sections

CODE
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ