0c6c2ebc2d65cbd5f205ab531e4dc2ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6c2ebc2d65cbd5f205ab531e4dc2ca
Size

76KB
MD5

0c6c2ebc2d65cbd5f205ab531e4dc2ca
SHA1

a7f3e3a0e8a9a9e950976e6beab6761c2f0b913e
SHA256

b568a93adeb18dc98105564e25c8105436f6001dfe005f77c8d002267420ee72
SHA512

127339bede77cb503e22640b998e7e7535243839b32202ee6b592dc218383e923cd1e898274b8a255db50edc40f57b18f81280d61c284b8758ddbf429a449334
SSDEEP

1536:DSUO/jj1ieNB/RlvAB9xx0RtQhEmtbVbb:DSNHcGh4RGRtQhEmtbVX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6c2ebc2d65cbd5f205ab531e4dc2ca

Files

0c6c2ebc2d65cbd5f205ab531e4dc2ca
.exe windows:4 windows x86 arch:x86

7e3880ed23d92f8ae65e409a6ae1ac15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryW
LoadLibraryA
GetLastError
HeapFree
SetLastError
GetVersionExA
FreeLibrary
lstrlenA
GetCurrentThread
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
LeaveCriticalSection
EnterCriticalSection
Sleep
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ