0c4976426ec77878b6789c7007e70461 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4976426ec77878b6789c7007e70461
Size

94KB
MD5

0c4976426ec77878b6789c7007e70461
SHA1

0970da408094c997cc9d6d6dcf49290fedbd4e7a
SHA256

4bb4a71c2001b63191c4bd19701904d3479cf8372387418dafd937d9097657d7
SHA512

6fe4d2a9678779e5d470a42a0c66bfdfb3cb731eddcae916a8d11b1b25083fdfcc076ac77c1e0fa5cd907a90d035c88275fcbc5992c252bf1a6ec43ed1cb78c0
SSDEEP

1536:OdBNKVvtMSYZk9ums5JhkVCMkETBIJTuEVq1hvDC6RH98umdjOmli5Msb3AsHtok:O30M1WuZbkVFuQGqjCGHu9Omli5Msfqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4976426ec77878b6789c7007e70461

Files

0c4976426ec77878b6789c7007e70461
.dll windows:4 windows x86 arch:x86

85af659d0335079bbe7629fe5c46c8be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawCaption
DestroyIcon
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIcon
CreateAcceleratorTableA
CopyRect
CloseWindow
CharUpperBuffA
CharToOemBuffA
CharPrevA

kernel32

GetLocalTime
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
VirtualAlloc
TlsFree
SleepEx
SetLastError
SetEndOfFile
OpenFileMappingA
OpenFile
LocalAlloc
GetVersionExA
CloseHandle
EnumResourceNamesA
GetFileSize
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetSystemTimeAsFileTime

Sections

.text
Size: 22KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ