c0b4b631006d38f8e30840c8f07cb47d4accca8980969437c57d183c27f15fba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b4b631006d38f8e30840c8f07cb47d4accca8980969437c57d183c27f15fba
Size

666KB
MD5

1b7a4dc9be866d179a11c7846ba38c1f
SHA1

c3eeb62bca6bc89abaeaf50467627aa98e7a095c
SHA256

c0b4b631006d38f8e30840c8f07cb47d4accca8980969437c57d183c27f15fba
SHA512

79ed5f28fffdd773f30d498fd34057356c63b4f702ef073dbcc7499cc74fdaa3e1b39118de839d29b099bd9f0733c5018f69017893971559f830a8fd5166b5ff
SSDEEP

12288:7zahJM1dCJovBlGnnUVnvBlGnnUVFrm8vhhTxHvi5DZoRGe:7D7vMWvM+rbADeGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b4b631006d38f8e30840c8f07cb47d4accca8980969437c57d183c27f15fba

Files

c0b4b631006d38f8e30840c8f07cb47d4accca8980969437c57d183c27f15fba
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE