0fecafbfb9c0c0ca961fa5a644797a72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fecafbfb9c0c0ca961fa5a644797a72
Size

860KB
MD5

0fecafbfb9c0c0ca961fa5a644797a72
SHA1

80b4f9ba3ed45aee343f28fbab8117021608067b
SHA256

eb0f2027169dc13052cd44e9c49ad73d04e654880d4c82124d77855bba179a0b
SHA512

b2d3b263d106e3d015088ab3ed3407c6d830a8f63084f941274c1a0c5bd8bda630089cd0c136a998198e4ba9ff663155bc6ed811e6ee45aa74bd09ef72787150
SSDEEP

24576:soFPp/RL/FMRklDVl1XkIJ5LbLx2x6MN/Id71ka37YjzZC3:sCp5L/mYf91Lu6MN/IIW7Yjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fecafbfb9c0c0ca961fa5a644797a72

Files

0fecafbfb9c0c0ca961fa5a644797a72
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ