0bfaf253f59c4ef81e17395dcfc372da | Triage

Sharing

General

Target

0bfaf253f59c4ef81e17395dcfc372da
Size

35KB
MD5

0bfaf253f59c4ef81e17395dcfc372da
SHA1

f3cab5f79ed780eced19df94d8e8bc77e94d76e1
SHA256

61163fad6b917a1fb6d9172437150bf4843544c5a25aa4a0e68532bb764447ca
SHA512

211409e42196df3500be554251469201cb6219a071a9063a1da93a2015db6bc637e7e6d8d72d3ce4a0b796f525e5010225e8dca2a100b553be837eb9217ba90a
SSDEEP

384:wI0Khz25vH+3hHjpv5gnFBoT8ANUS8+sPt+82TEgtcAMB:wihS5vH+3vv5gnFBows7At+8GiAMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfaf253f59c4ef81e17395dcfc372da

Files

0bfaf253f59c4ef81e17395dcfc372da
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ