0cbf44d7e85184ac1754757ac3ae4f23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cbf44d7e85184ac1754757ac3ae4f23
Size

370KB
MD5

0cbf44d7e85184ac1754757ac3ae4f23
SHA1

6a59dae7b0f07e2348727ba05e6716e1eefe5bf8
SHA256

b9dd4c85edc978bf40aeeee1506aa1b06d6f62cfda25fa10fe036c1ba8b48184
SHA512

f0fcbbb91e0202e1c0ad4144bd712f5969e7490103a5dcc06e3bb6e0811ff192ce63889f3745822bda614aa9d895dcb8a6714704431e5c34f5b67c7ac095bf40
SSDEEP

6144:uGZZ7nTOMuov4VQg8gEcHEroM1gxO0TNv0B28MONq5pUOA1NxidjM41q/G:TlTOMuovubDHcHoJv0B28MONmKxiRM4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbf44d7e85184ac1754757ac3ae4f23

Files

0cbf44d7e85184ac1754757ac3ae4f23
.exe windows:5 windows x86 arch:x86

5152ae5655381d7ec3cf0cfbff896ac8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
CloseHandle
DeleteFileW
HeapAlloc
SetConsoleMode

advapi32

RegOpenKeyExW
GetPrivateObjectSecurity
IsTextUnicode

Sections

.fqfsj
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vajal
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ajejcn
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ