0c87bc0f34e79c7b61acddcd32505aa8 | Triage

Sharing

General

Target

0c87bc0f34e79c7b61acddcd32505aa8
Size

60KB
MD5

0c87bc0f34e79c7b61acddcd32505aa8
SHA1

7e49b455907d21615db2b782f1e0a53609e12873
SHA256

bb1ebc5af256ac353b8ca2bd646363f73c93325698e65ff29fbd72e894113475
SHA512

7f8f244a141c42266e39d8eb89d92ed3275ef6745b6590b84dff13b2dcdaadddb61c37acd05873adf93036498c7898553cc0c06065c78442b3c7e95def2c5806
SSDEEP

1536:wzjsCiX1owiDJe8E1iEb0Edu/GHoWAjl857S67qpYS:wvUXdi4+Eb/du/GIZ47SKq2S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c87bc0f34e79c7b61acddcd32505aa8

Files

0c87bc0f34e79c7b61acddcd32505aa8
.exe windows:4 windows x86 arch:x86

5476e7742df4db1f7cbb514e27a80827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
SetEvent
OpenProcess
GetStdHandle
RemoveDirectoryA
GetTickCount
CreateFileA
CloseHandle
FindClose
HeapSize
CreateMutexA
DeleteFileA
ExitProcess
GetStartupInfoW
ResetEvent
WaitForSingleObject
SetLastError
GetCommandLineW
GetFileAttributesA
GetEnvironmentVariableW
GetModuleHandleA

user32

GetDC
PeekMessageA
GetDC
GetSysColor
MessageBoxA
GetClassInfoA
FindWindowW
CallWindowProcW
FillRect
DispatchMessageW
DispatchMessageW
GetWindowLongA
GetDC

perfctrs

CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ