0bc1c0c805bab38513b66a756aaa8d1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc1c0c805bab38513b66a756aaa8d1d
Size

149KB
MD5

0bc1c0c805bab38513b66a756aaa8d1d
SHA1

af273e5f7e1fc3730416e7dd634465f0ec9df84a
SHA256

8efd8aac5127b92980d3f8e8ab0b6d37fb0de6eefe9f4b619d6d18c9c524780e
SHA512

fcb34bd2db6e124d9dfcc23438c1d0e88b41024fafc850139ef76ce6943efcfd5b4f996b6665484a8d22e536ff2bc4a7d58531efc332cf745acd2d0556106ffb
SSDEEP

3072:VmtPxk+K+Lv/F576lLXD30SZviXf73G7MDa5itPE57C19y9:ktPmuujEf73GgDwiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc1c0c805bab38513b66a756aaa8d1d

Files

0bc1c0c805bab38513b66a756aaa8d1d
.exe windows:4 windows x86 arch:x86

33055de6cfd365915def4c5add792668

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetDC

gdi32

GetDeviceCaps

comdlg32

GetOpenFileNameA

comctl32

InitCommonControls

oleaut32

OleLoadPicture

ole32

CreateStreamOnHGlobal

advapi32

LookupAccountNameA

msvcrt

memcpy

Sections

.RIF1
Size: 35KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE