02c8ea3bb076c5577e49831ec045f415 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02c8ea3bb076c5577e49831ec045f415
Size

15KB
MD5

02c8ea3bb076c5577e49831ec045f415
SHA1

faf4b4e06843289abc2a6c59f10a19a9fc5cad9a
SHA256

53c5be22546d21253ed579656fd2cb56470461c2f7d7b3f5d5248921a1ba3706
SHA512

50848ec6b62e9ef83d264a9e55f96ec2bd8af1deb602691c55f26505367de9d70f95b96c72cc06dc9fcec7a4135ab26975f0245efb0c2c746295b16f3e714b12
SSDEEP

384:mPFloE0Pf/SkChw60EV0KUm/pnLpmYOS:SF4PqaMUu1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c8ea3bb076c5577e49831ec045f415

Files

02c8ea3bb076c5577e49831ec045f415
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gmarsvg
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE