c0b90e97c6a9d2375d478090fe461d70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b90e97c6a9d2375d478090fe461d70
Size

66KB
MD5

c0b90e97c6a9d2375d478090fe461d70
SHA1

8f2477c44471751b23d802ff5fd2fce3a3040f9f
SHA256

f9790ae99bb6498bc113e389e4a327bccba9f79ece3762f576f6d9866fa38bc2
SHA512

eb71d9fc3c120cac418deddc5e27fa8fbd8124c71b6bdc6422580091948d8e226dec100d1567c814f2052674ef117529160276710e5217a073c84a6543c5564e
SSDEEP

1536:+Dd6JfW0JSZ33Y+aAdqiyqArLnHVQ++LDfZXW:+5c+gSZ3o+2jgjpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b90e97c6a9d2375d478090fe461d70

Files

c0b90e97c6a9d2375d478090fe461d70
.exe windows:4 windows x86 arch:x86

d7849dd320fe2aab7ee12a2d021bcf41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpFindFirstFileA
FtpPutFileW
GopherCreateLocatorW
FtpCreateDirectoryW
CreateUrlCacheContainerA
GopherOpenFileA

urlmon

CreateURLMoniker
URLOpenBlockingStreamA
CoInternetParseUrl
URLOpenBlockingStreamA
UrlMkBuildVersion
CoInternetGetSecurityUrl

user32

DrawIconEx
EnumWindows
DdeNameService
FrameRect

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE