0ff0e792cc8b930ed2553cc435f85e0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff0e792cc8b930ed2553cc435f85e0c
Size

28KB
MD5

0ff0e792cc8b930ed2553cc435f85e0c
SHA1

7ec476e021abbe581bf8425c75e6964ed9d5551e
SHA256

538116b083e0ca4e55d14d4cadb745a1f8a71c0fceaeb7186ef6c48f66d6cf2d
SHA512

da3ec7b0edec84a8156a740db2aae3756e84bebed0d211b4e6ba21e48b6cf28a27d24838d9a29c342526b47ea196ffa67d84906aa448db385b0f1e76038101de
SSDEEP

768:ulhgBrXe5LUkjbwBJj3MAyu/hO+NB8U3H:0gBrXe5LUkYJLMBu/Y+z8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff0e792cc8b930ed2553cc435f85e0c

Files

0ff0e792cc8b930ed2553cc435f85e0c
.exe windows:4 windows x86 arch:x86

ee94fee6d96573394df1ccff29966ad9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_tell
_rotr
_tzset
_umask
_spawnl
_stat64

kernel32

GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE