0cd3faf8ec6e86471856e6a54b826409 | Triage

Sharing

General

Target

0cd3faf8ec6e86471856e6a54b826409
Size

13KB
MD5

0cd3faf8ec6e86471856e6a54b826409
SHA1

100d7d8d0b0368d7782716771c74bf9401bd83b3
SHA256

7b9b021811452aa5dc948bf93c608b380676b843b01883431e71c50a4aa70972
SHA512

ca173aef1101c029dc91c4a33b7c27d45e93de3223da18628550a8b65245f8917f88fc1c95d16d3112102ab4c33efe91f56aebb8f96564d7325d9dce35b7878a
SSDEEP

384:5tzqfB2YzPiR6m/XasjlEkO/u/4M7U/GZ2:5tM2YzPA6m/XasjS3m/4DO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd3faf8ec6e86471856e6a54b826409

Files

0cd3faf8ec6e86471856e6a54b826409
.exe windows:4 windows x86 arch:x86

ed752be7b437aead73b91250ffe08feb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
ExitProcess

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE