0cfe4475400a1bf15b8c8d48c6569dcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cfe4475400a1bf15b8c8d48c6569dcd
Size

28KB
MD5

0cfe4475400a1bf15b8c8d48c6569dcd
SHA1

5bbc74b628dd7ed97b3332c0820db530c041800a
SHA256

e2b4ee8729dd05593d1e8824f51045c58c1690035e148911fbbce14d928123f9
SHA512

85819cddb977f99fb46a955ac1f195cbf0e46ae591c444a999209e5208779e15296cae53898097d8fab4b5faa581a756e41bcd0e841fbb8fb33fe3a2761b7095
SSDEEP

384:N4zy4y3NzDw8AqrgK2yg6LkhVxfnsiQhm6cwyQL2lHqR0f:6y4szDYqrglyQvxfsiR6xZLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cfe4475400a1bf15b8c8d48c6569dcd

Files

0cfe4475400a1bf15b8c8d48c6569dcd
.dll windows:5 windows x86 arch:x86

4881313ec1443a56dfc83cd76a552146

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
LoadLibraryW
LoadLibraryA

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.2
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ