0cf478790ad8b55b0bcfebc0315c57b6 | Triage

Sharing

General

Target

0cf478790ad8b55b0bcfebc0315c57b6
Size

31KB
MD5

0cf478790ad8b55b0bcfebc0315c57b6
SHA1

779d8bb3248bf2f395836410ef3c4311d7505bb0
SHA256

b28c71a4ea9c3bc224ac689aff6df43991ef96eb1db32c9d1362f60cc2a380cb
SHA512

2ae6c0362c8eb43a608f97bf9f5a1c980583b828315b0c703067d81b50484f506dfd49f6689dfa16a884c42c497223713588699234ff860bea87264c4976a9fe
SSDEEP

768:CyDUoYwRVge4sUSdOAc9HLjTC9bmKx+XSeLB9:CyArwLA8UlLa9b7x+ie9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf478790ad8b55b0bcfebc0315c57b6

Files

0cf478790ad8b55b0bcfebc0315c57b6
.exe windows:5 windows x86 arch:x86

3725e18b69fe06940027efc4bf426581

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
DeleteAtom

Sections

.adata
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 485B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

windows
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ