c0fed8f6bc9861c9f9650636ef6777c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0fed8f6bc9861c9f9650636ef6777c9
Size

414KB
MD5

c0fed8f6bc9861c9f9650636ef6777c9
SHA1

5c911412c61520b91bfc3c65d4aaf9a97979f385
SHA256

4ac53a76df9a5bd37e5f77de3918d701d1bfad2bd7313106cd20d076e2a025ee
SHA512

2c350ff2d171be5148f4d5117eaf73a41efff792fd6a8caa91f4c7df41bb93ff3545d36767bbd9842001a5e2e01765a82c235d3392bb8eebdf11993328e0d90a
SSDEEP

6144:w28MxU6K9X6E29zHXgblZD6bV9Y+tQriQqGKWK6UhnCjO3z6BhuxEaHcWE1M9ZLd:98OQZ21HQ/CV9YZ7LW6B0EtWOOPePt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0fed8f6bc9861c9f9650636ef6777c9

Files

c0fed8f6bc9861c9f9650636ef6777c9
.exe windows:11437 windows x86 arch:x86

adaaf1b4122cec320262924ff30c8956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetObjectW
PatBlt
CreateCompatibleBitmap
GetTextMetricsW
CreateBitmap
CreateCompatibleBitmap

kernel32

FreeLibrary
ExitProcess
VirtualAlloc
LoadLibraryA
GetModuleHandleA
QueryPerformanceCounter

user32

FillRect
CheckDlgButton
GetDlgItem
RegisterClassW
LoadStringW
MessageBeep
DestroyIcon
GetSysColor
SetForegroundWindow
OffsetRect

advapi32

RegCreateKeyExA
RegOpenKeyExA
GetTokenInformation
OpenThreadToken
RegOpenKeyExW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 398KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ