0c7460c96b9a373f339e4f276443621b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c7460c96b9a373f339e4f276443621b
Size

6KB
MD5

0c7460c96b9a373f339e4f276443621b
SHA1

426f44d622b8e0fe7953c2a0d385f0cca878db8f
SHA256

213a8bfaaf45f24845e9265830a67579abd245d189e5f3bee49473106d4e510f
SHA512

f84e04ff98aabbc8c96a7cedef3d8b987e3c75ae76fa8bd1770e0b3a46a7ebc81cfbdccd986a9cccf7ce253cc67e16087f4e26d6d244f97026f9839fa5503218
SSDEEP

96:aRQRoZwRCwk9hB9618vP5M3fFKdja91bCyPsPlEVhuHs/NVRnS/:BBRCwk9hBMKGfFKdKJPslynS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c7460c96b9a373f339e4f276443621b

Files

0c7460c96b9a373f339e4f276443621b
.exe windows:4 windows x86 arch:x86

49d057ac2ee9ff5d419c6f905d901fd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
SetFileAttributesW
lstrcpyA
CloseHandle
GetModuleFileNameA
lstrcatA
CompareStringA
ExitProcess
CreateEventA
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
RtlUnwind

user32

ShowWindow
CloseWindow

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE