0cb529d172928d5648ec43fb343079d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb529d172928d5648ec43fb343079d7
Size

175KB
MD5

0cb529d172928d5648ec43fb343079d7
SHA1

957166fbcdc59dfbb76af0fa2785c1998397c225
SHA256

f8c56a2e79f9c648130668de931327b8fbd66059aed2e889a5189f916cd51cc0
SHA512

ee7399002711c1fdb1ff99d61c6068f4e053f8448a92388a5c4671f3a8cf8a64e385ee39e2ad28a1e91fb82a38aef390a673b4e01e479c2b5a37a3d36306a899
SSDEEP

3072:PCpOe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pn9ebAAW0f3:PCpOem/DzJhok45X4HPwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb529d172928d5648ec43fb343079d7

Files

0cb529d172928d5648ec43fb343079d7
.dll windows:5 windows x86 arch:x86

9451e8b8b1259e622801dd0cdc59802c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

VarI2FromCy

user32

TranslateMessage

msvcrt

memset

kernel32

OutputDebugStringA
GetModuleFileNameA
GetModuleHandleW

advapi32

RegOverridePredefKey

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ