0cef008dd1a97bd1c1215cdadfb6be3a | Triage

Sharing

General

Target

0cef008dd1a97bd1c1215cdadfb6be3a
Size

47KB
MD5

0cef008dd1a97bd1c1215cdadfb6be3a
SHA1

0c5704c392d34220b9788110627cc55afcc9c33f
SHA256

2602572a4796a821b4e34c006db92a38b8de312e5c2f447a9a11b2061fd24101
SHA512

94e29ae15ff3eb07770743dfcc3f5cf55122c22bce61d6b1c747304d6893231614f40af2cee05c0d07717f60a989416986f066701badd4f568da158c7dbf0ab6
SSDEEP

768:3gdS9lYkqLiul1LroiVUcfS3hufoqHd7ypJtk13:3gdCeLiq1LhVUw+YfZdiJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cef008dd1a97bd1c1215cdadfb6be3a

Files

0cef008dd1a97bd1c1215cdadfb6be3a
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE