0c0c187699255ad3ade9e0536b8d63e7 | Triage

Sharing

General

Target

0c0c187699255ad3ade9e0536b8d63e7
Size

480KB
MD5

0c0c187699255ad3ade9e0536b8d63e7
SHA1

38cc407577c84f0265b3e0cf0a93034ef402df6f
SHA256

e7f1929f679f871ee1b0563365bf60fdc4b57ee8be02458bd2f1467b40c9086f
SHA512

b4c415f977bb8f113540cb7b68f395d81a8339ce881adffc3cf420158e0684c26587126c86d40067cb65825f76d7cded6eba0bedf4923af68920281c36f163ce
SSDEEP

12288:WbFtxKsIySCGMY6EAeUAaQUfupAbzHIDNS4ju1FDmBDqI:TBTCUnlUfQAiju1FDmM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0c187699255ad3ade9e0536b8d63e7

Files

0c0c187699255ad3ade9e0536b8d63e7
.exe windows:4 windows x86 arch:x86

77eabd60814572245fffd3a7a6ec009a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ActivateActCtx
GetCurrentThreadId
GetCurrentProcess

oleaut32

VariantCopyInd

user32

GetShellWindow

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE