0cff59284cc821b279175b0cc68e2a47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cff59284cc821b279175b0cc68e2a47
Size

55KB
MD5

0cff59284cc821b279175b0cc68e2a47
SHA1

f2c4535e2d0780aed00d20156557ed7bb32d23a9
SHA256

9c98ecf5c9d0df2ba85622a22ebed63fedd5d78454f4eb839e5085b3d76a7c7e
SHA512

8d3731cc64a44b90cb6cd5799f4986694f275c28563cd3f236ded1fe7205979ff739fbb91d0c8dc656081de5189ae89434a3f70c8281bc88dcf9dffb0fac4d7b
SSDEEP

768:YSmd/9Nbp31yGVAW5leLJGaw1wPZus4HHVT9NbMXx1Quwc:YN9mYlow1aZus4hMLkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cff59284cc821b279175b0cc68e2a47

Files

0cff59284cc821b279175b0cc68e2a47
.exe windows:4 windows x86 arch:x86

780a02285cb2d17a426889fcbb2c9652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetLastError
FindAtomA

user32

CloseWindow
GetDlgItem
GetWindowTextA
EndDialog

comctl32

ImageList_LoadImageW
ImageList_GetIcon

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 405B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ