0cb12e53da19c09382524e968e43f602 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb12e53da19c09382524e968e43f602
Size

120KB
MD5

0cb12e53da19c09382524e968e43f602
SHA1

baa866d7d5a10cbbc45d8c6b9de0edb2a9c614e6
SHA256

cf7f824079148d4c180de2d64742a5437ff9b8e4ba4fc9842aad2784db896d1e
SHA512

4eea0bb8fc4f1071bb4744530b3d1252a52195f8c7b6f06d7a34b5e51e59a71172e0977b0afc9f48e91c32413d8a6f5c0657c981fd0024ee994a92c65a8b59b7
SSDEEP

1536:XOo51oGErSQxlsh1v7r4MXmOTe/b4ktS1BRpwL1FhM9Z7bjeuhSdbNDT1m5C1Imx:RYrSusz4M2PjQ/iL1Fqb7ONf1kC1IxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb12e53da19c09382524e968e43f602

Files

0cb12e53da19c09382524e968e43f602
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ