0cf1a35305187c117f47c88e443295f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cf1a35305187c117f47c88e443295f4
Size

37KB
MD5

0cf1a35305187c117f47c88e443295f4
SHA1

b066f96a1a1859d148f818f5ede91bb79181c595
SHA256

e566a83f8f413615156f752201577313dc9b37d7c4b55d9f258de3612d04f142
SHA512

ee9e25335619da268c3db1405f16df2dfc3229486ca85ff61294b3bdec1a03bc5adf8be9c080f36b1bf55f45201399450dcbeb85d8a78a45497386a5ea219421
SSDEEP

768:nRLiXTCtLvW2TPPB68L62d4Y4ElnMKnTOIPP3XvZ2ZCyAjxQ9t9IBK:RmutDWiPw8AssIBK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf1a35305187c117f47c88e443295f4

Files

0cf1a35305187c117f47c88e443295f4
.exe windows:4 windows x86 arch:x86

33aa7fbdf382c5fb2fdc2b19c673f17a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
GetCurrentThreadId
ExitProcess
FreeLibrary
GetSystemDirectoryA
SetFileTime

user32

GetMessageA
PostThreadMessageA
GetInputState

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ