c0b404099709c886205e98de21d6dae2 | Triage

Sharing

General

Target

c0b404099709c886205e98de21d6dae2
Size

83KB
MD5

c0b404099709c886205e98de21d6dae2
SHA1

5362e359ba229713abca712fb9647d787b385021
SHA256

7ded6ba391e4573e757ddbdb7ebf4f97058706d7223f42114f942e590e1fe875
SHA512

d737c34b4e6137f1c8fbf0f4dbf9e6bff7fe142a12b9ee8c519f191e5061e3f2f28bebc2285ac93eee030df35b95712b759de3dddaeb834b9011b68dde3d6ed4
SSDEEP

1536:9///ozDPnfhtevy5hjjtob1esy16ZFSjEErxTWDTMqhGKYIZTET8bDQ:m/nfdHpOesKCUjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b404099709c886205e98de21d6dae2

Files

c0b404099709c886205e98de21d6dae2
.exe windows:4 windows x86 arch:x86

cfdcd7c8a45dd0e10d5ad98ba761ffad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleWindowInfo
GetTapeStatus
CreatePipe
IsBadHugeReadPtr
FindVolumeClose
BackupWrite
EnumSystemCodePagesA
SetThreadAffinityMask
SetCommState
EnumCalendarInfoA
EnumerateLocalComputerNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE