c08c216cf43b91d7f667b591edb9a4e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c08c216cf43b91d7f667b591edb9a4e4
Size

53KB
MD5

c08c216cf43b91d7f667b591edb9a4e4
SHA1

4236ec9ca159c7c1b3bba4fdb67998a9a7f5b6fe
SHA256

b33a7523f2a580d886e3103b81c82f20746614ad89f73dac27bb8e71d926d441
SHA512

1efd5b0a58bda84e66fef8dda6fa3e7467fcd3704862a8f49078488079968b9a98ac01914cf570dd334d7af4bed4513caaac215844ae903de70020856c0ee77b
SSDEEP

1536:h/qJKnZyRM7PTZs/hGZHDCXrxBZ77LPuGu:h+A7PTZxHDUBZDuGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c08c216cf43b91d7f667b591edb9a4e4

Files

c08c216cf43b91d7f667b591edb9a4e4
.exe windows:4 windows x86 arch:x86

ac87c749de041d050a4ac16a115a8cff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ