0cac4046b62b830a813f037dedf0089a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cac4046b62b830a813f037dedf0089a
Size

63KB
MD5

0cac4046b62b830a813f037dedf0089a
SHA1

8481454a96f4cbcbf553546a3eb38bb3bb7ebac5
SHA256

4ffb407a7b40472613f9717d77b79506b378c6d218414111916844c6a1dde60b
SHA512

eb92bd6a13df93b271452d6b82dace4c67901ab1e9d7ba46aa1efac2d4c51ca7520e59a8524ef11de8b75be907a4612256bad8e68b7ce4a9e65cba9ccd8dbec9
SSDEEP

1536:mPmxNHdpM242NS8D37Q8nx/1UzoO68tOFsDx+91G4v:mP4NHzdb79nx6oOPF4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cac4046b62b830a813f037dedf0089a

Files

0cac4046b62b830a813f037dedf0089a
.exe windows:4 windows x86 arch:x86

136685ef29d133397747e92ffe4397a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
SetLocaleInfoW
GetPrivateProfileStructA
AddLocalAlternateComputerNameW
OutputDebugStringA
ZombifyActCtx
GlobalGetAtomNameW
SetConsoleIcon
GetConsoleHardwareState
GlobalGetAtomNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE