0cc93c48a1e03287d895e86d2546b3ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cc93c48a1e03287d895e86d2546b3ea
Size

15KB
MD5

0cc93c48a1e03287d895e86d2546b3ea
SHA1

29d1ffa452e53723bae0afc81aa84056ab6af9d1
SHA256

af17f0c3a4ad215635ee02476374abc0687b6d6d54ff8ed966f10fbbe3b464cc
SHA512

744987c9a99aa600ed9b858d435485e7d39f85458dbf81b8d6bba98a135c1925431e3722e14985b409e87158aad3f9a91bffdfe38ae475c11c69d4b6574e3c7e
SSDEEP

384:Ot0Kv2cI3KFQF77iiRUfcYKBNQ37Aue59/VP:Oenf7ccNN6cua99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc93c48a1e03287d895e86d2546b3ea

Files

0cc93c48a1e03287d895e86d2546b3ea
.dll windows:4 windows x86 arch:x86

43eecaea1f626a218627a9cba0315a3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ