0bfa7b3e6b836c341ceb438ae5a8b06e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bfa7b3e6b836c341ceb438ae5a8b06e
Size

45KB
MD5

0bfa7b3e6b836c341ceb438ae5a8b06e
SHA1

6bf7699941f1d0d275962a5749c17a11ee197d4a
SHA256

f04f4d2c5bee9cf5cc90c2f5211607e1fb7729a6f043f827aad3daeb64da169e
SHA512

b7f06c2d7cf12a03dbf0ffe9d9a543de9996085e9c395b8993f0aa9f4f07a787bd784d3b62c6a0ac24c5b1646576f7f7ebec549cb6bf5fa5a3d9056d7a1232c3
SSDEEP

768:YhK8hV71rm4kb+QzeL4K1upoSIA520p1WSonEgTJh1FXTFqUonCMQpPVGd1JnTWO:fiJ1y4kKD4UuySA+1fy1FX5NXZV+JnT7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfa7b3e6b836c341ceb438ae5a8b06e

Files

0bfa7b3e6b836c341ceb438ae5a8b06e
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE