0f1ac80745ff82eebbea9d527ecf2cf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f1ac80745ff82eebbea9d527ecf2cf3
Size

25KB
MD5

0f1ac80745ff82eebbea9d527ecf2cf3
SHA1

431cf14f785e70727496b93139d80ef2e91eed9c
SHA256

9d44b49cf3dd7ab3fc640064a8edf53298400c61d10a9309a29bd55497836caf
SHA512

078d374555d5d02ace2d65335f098c3d0c3c351c11c4460ea118dd9c40fb16fde5edc6533bb3f291a9187708cedce1ea8beecc06fecdeb2b9ac24cc59f913c7a
SSDEEP

384:WsT3ao78BoTfUfy3ROk5x+Xu8hweL7hvtv9SgLjae6ihy+Xxc6Rim00RlS5:Wsj78BhfSWAotv9hLjXhZX66RiV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1ac80745ff82eebbea9d527ecf2cf3

Files

0f1ac80745ff82eebbea9d527ecf2cf3
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ccc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE