0f1f60cbae8c537856ec60153d58eb0f | Triage

Sharing

General

Target

0f1f60cbae8c537856ec60153d58eb0f
Size

484KB
MD5

0f1f60cbae8c537856ec60153d58eb0f
SHA1

8c9cd4230110d20ab1070997852dffafa8c902ec
SHA256

d3499ba260ca5d94830789511fc893a91504efd99d5d2b42ce0ba0329be68476
SHA512

f7dba680cfc2652ed3f028add7d562f2a29477b487cdb1fe097ad3a8f98f3c962695d2b8ffab70fabfb327adfe491a81ab5a3be1376bc7fe6d39fbde2945647f
SSDEEP

12288:Tjol5Ksngu9L9Zumrf0KjuH0T2tMa5fUrhOoxs:TjolwwHjf7Q5txdNoxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1f60cbae8c537856ec60153d58eb0f

Files

0f1f60cbae8c537856ec60153d58eb0f
.exe windows:4 windows x86 arch:x86

e32e3360b274e60c5f9bc5d80a16f964

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFormatDrive

ntdll

NtQueryPortInformationProcess

user32

GetDesktopWindow

kernel32

GetSystemDefaultLangID

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE