0bcfea1fc56a9a1e848ec7f654f63ab0

General

Target
0bcfea1fc56a9a1e848ec7f654f63ab0
Size 14.5MB
Sample231230-c2jddaffg5
SHA256 e3a865793575dddcdb926aee82c24accb320862e047141baf615e77e0a511f95
MD5 0bcfea1fc56a9a1e848ec7f654f63ab0
SHA1 ed727b4cb6319c1c5957d515b34f0e464fa1581e
SHA512 6d21b2fb9ed005f2e2b9363527d763220e69f2a5df0843ddd1c8d049ec4f7f10de0b9a2e2abaf7bee6bdbf37ec0033cecc2c8238fa896912d31670a1c724e728
SSDEEP 12288:WKBz1FxKfGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:9Bz1Fx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bcfea1fc56a9a1e848ec7f654f63ab0

File Explorer

0bcfea1fc56a9a1e848ec7f654f63ab0

.exe 14.5MB

0bcfea1fc56a9a1e848ec7f654f63ab0

IMPHASH 7174a31dcc915db9e7423bf0a2312578
SHA256 e3a865793575dddcdb926aee82c24accb320862e047141baf615e77e0a511f95
MD5 0bcfea1fc56a9a1e848ec7f654f63ab0
SHA1 ed727b4cb6319c1c5957d515b34f0e464fa1581e
SHA512 6d21b2fb9ed005f2e2b9363527d763220e69f2a5df0843ddd1c8d049ec4f7f10de0b9a2e2abaf7bee6bdbf37ec0033cecc2c8238fa896912d31670a1c724e728
SSDEEP 12288:WKBz1FxKfGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGm:9Bz1Fx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

47.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

172B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

51KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14.4MB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

0bcfea1fc56a9a1e848ec7f654f63ab0

kernel32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

0bcfea1fc56a9a1e848ec7f654f63ab0

kernel32

advapi32

generic