0afe06f881b9258506cfe831a2b489859c60a08747beba00461cd99c3b0b9f0b

General

Target

0afe06f881b9258506cfe831a2b489859c60a08747beba00461cd99c3b0b9f0b
Size

178KB
MD5

8832f51c590d70cd12116f8f330cc31c
SHA1

f4fd64ddf8dbf0c079485b84e463849c158b2b29
SHA256

0afe06f881b9258506cfe831a2b489859c60a08747beba00461cd99c3b0b9f0b
SHA512

7bbf94d5b232d7b79911f55efbf5fbb6260861914e0345525d930756169fe263ea0923772166d1199985bf1ad8a43bc9a372a4c9e1abfb9604cec28ee3f5f799
SSDEEP

3072:ljLeiNX7DF31RzcUPwpmAoNExCRSR3aFxc:l6eX7DFbPkIpPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
0afe06f881b9258506cfe831a2b489859c60a08747beba00461cd99c3b0b9f0b

Files

0afe06f881b9258506cfe831a2b489859c60a08747beba00461cd99c3b0b9f0b
.exe windows x86

4600f50cbffe3c84ca9cc83d13d81149

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
AddRefActCtx
LoadLibraryW
CreateEventA
SetConsoleCP
GetModuleFileNameW
SetConsoleTitleA
GetShortPathNameA
LCMapStringA
FreeLibraryAndExitThread
InterlockedDecrement
GetLongPathNameW
SetLastError
GetProcAddress
LoadLibraryA
WriteConsoleA
LocalAlloc
MoveFileA
EnumDateFormatsA
LocalFree
GetLastError
OpenJobObjectA
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
Sleep
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4600f50cbffe3c84ca9cc83d13d81149

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 117KB - Virtual size: 117KB

.data Size: 31KB - Virtual size: 60KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 117KB - Virtual size: 117KB

.data
Size: 31KB - Virtual size: 60KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 5KB - Virtual size: 5KB