c0fdb4750ab062ce058d6428686c895a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0fdb4750ab062ce058d6428686c895a
Size

26KB
MD5

c0fdb4750ab062ce058d6428686c895a
SHA1

904a892abd130a3525433b0db3df3aa73a5d9777
SHA256

9c89c42e77d397ad516c0e91404c8a11ada97d8417cb1bea9d55ea0c30d1c313
SHA512

d8022e467ed394295b5c2e1b4dbf322e8027cae25083b3101ee339d24cc1549e4caf897be7fa1518aad4d32dbd7cc3aca1e994c7bdb732313bf7195bd4cbbdab
SSDEEP

384:KHbatEKDYx/tbKBxjv4N9m78uyTcOeKgr1JepZzPsIiKtC09A57oimlfKrt:K7gMx/tIhgvGoeKEn8ZDsIptC2M7oah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0fdb4750ab062ce058d6428686c895a

Files

c0fdb4750ab062ce058d6428686c895a
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE