c0b774e821a91939ba63bbf1995fce32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b774e821a91939ba63bbf1995fce32
Size

12KB
MD5

c0b774e821a91939ba63bbf1995fce32
SHA1

d23f4527934883f7f27c22f9aad6fe7767117ee3
SHA256

4eb5f94a7e6dc5a17b30777120603a5fb22cfc3f1c67eb33e93f93ed5f701922
SHA512

982905acce8436c86ea01a941aa9d6746d924f807bedd37ad05d3a815c416b907c7f263bf72ac5f7cbd44a87d5fc4f7da3c058e08c0b0d3b281cd413e2ec4e1f
SSDEEP

96:c2QFvpO/OT4+F49dBJ/vaoYjVeapP7p71yQtQKQYQ:c1c+7S/iea17p7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b774e821a91939ba63bbf1995fce32

Files

c0b774e821a91939ba63bbf1995fce32
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ