0c1bab683b57c43848e37ea8b47dcd04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c1bab683b57c43848e37ea8b47dcd04
Size

116KB
MD5

0c1bab683b57c43848e37ea8b47dcd04
SHA1

5ade6f352d75690f7c50c45ee5321783ad52428d
SHA256

961ddc6aff13c23dcf3229c12c8cd090a64db211109bf07b84d69e5844667969
SHA512

b2785cb1af4d63ea7b1933e9c709865805b1aeb5e39e40698b8bec8fc85b9f1bbc97663068770fd17c6d0219890e6267e0638bc2a058b7c908691e81e7d45d87
SSDEEP

3072:ZytIcFFR2JxrQQpOYvfIrXmNbMMbCKfK8HF:i2EQDRwOHScF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1bab683b57c43848e37ea8b47dcd04

Files

0c1bab683b57c43848e37ea8b47dcd04
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ