c0e47f20f07f423bc06bf37b95caeea0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0e47f20f07f423bc06bf37b95caeea0
Size

18KB
MD5

c0e47f20f07f423bc06bf37b95caeea0
SHA1

afe9800e0c253dcfacc4c0133e1d7cc85bca395c
SHA256

c435793c5983911296da9f3953af1317795a5edf98867bf20ca6fea258b19646
SHA512

3a633acc8f6f64919bdb392835a57ce022afce60ec30ca2ed663408c067b9183eb68d280d35d61d4ee21130c7346c095ee98ba1352cdd9b0e2596b074e973b3b
SSDEEP

384:ifql5+/jhERAtjX26zkbQw1FHZh3vA0PFWX:iiqdEyty1h1FH73vy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e47f20f07f423bc06bf37b95caeea0

Files

c0e47f20f07f423bc06bf37b95caeea0
.exe windows:4 windows x86 arch:x86

be443f7b5f405e9f52bc73e6da373c7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
LocalAlloc
LocalFree
lstrcatA
lstrcpyA
lstrlenA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE