0c945fb5b46a6b766e1353ec1ceb1a59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c945fb5b46a6b766e1353ec1ceb1a59
Size

52KB
MD5

0c945fb5b46a6b766e1353ec1ceb1a59
SHA1

6bbf8ef0491f4aef53a1cbba9e656d8d27fb72e1
SHA256

99441af55c33a86b268cc823bec8faa1796c9010b0fe74f5d5cf16f49f09787f
SHA512

ac935e99475ff76ae90c1f17f69ec3ed69e45bce5b0e32872d9c84fe08ad8afa90f0a2e692b0397f3ceb4f73106aa35e609433c539083ff1c2497e1d6bf63628
SSDEEP

768:Hx4XnUvC5Z40uD/zLAgwFrLFVxQPqJQT5jyf2uU3VFGJNennnnnnnnnn0HmCgufe:Hx4X4CeD/gflvS0agNennnnnPCTfuH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c945fb5b46a6b766e1353ec1ceb1a59

Files

0c945fb5b46a6b766e1353ec1ceb1a59
.exe windows:1 windows x86 arch:x86

e2649837c59f87885ca4eb82bebd799b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA

Sections

.code
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ