0fd7ec8e4e1f87d0d54ffbe1181419f84b132cfb8ea55a0ea26f6f3426bd3a18

Sharing

Copy URL Twitter E-mail

General

Target

0fd7ec8e4e1f87d0d54ffbe1181419f84b132cfb8ea55a0ea26f6f3426bd3a18
Size

78KB
MD5

6a56511cf0632744cfda4c8f9c046a76
SHA1

55c6797b2b1045557b3cc7b6937f437ca218bd6e
SHA256

0fd7ec8e4e1f87d0d54ffbe1181419f84b132cfb8ea55a0ea26f6f3426bd3a18
SHA512

cec2b8aa96c5db0b525948a15b4f3a36396d4618936404899248d7736354c0321a4b84bb899cc9244606022803fc93c3a1258b223f0b98d42c1fa8599fc20281
SSDEEP

768:NzjhSJJauzA80uenhEdZuca5Pn/hUU36CYmCdsN7Uz+yJQrlUKH9NTb2xGjrgNQC:Nz1SPcPOAJUU3Hqd3SOQlUKH96/ys9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd7ec8e4e1f87d0d54ffbe1181419f84b132cfb8ea55a0ea26f6f3426bd3a18

Files

0fd7ec8e4e1f87d0d54ffbe1181419f84b132cfb8ea55a0ea26f6f3426bd3a18
.exe windows x86

d436b8ed5d91e8c6d37365e8068f7109

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
LoadLibraryA
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetStdHandle
GetACP
SetConsoleCursorPosition
GetConsoleOutputCP
SetConsoleOutputCP
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

user32

CharUpperBuffW
CharLowerBuffW
MessageBoxA
SetActiveWindow

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d436b8ed5d91e8c6d37365e8068f7109

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 45KB - Virtual size: 44KB

.data Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 2KB

.stab Size: 8KB - Virtual size: 8KB

.stabstr Size: 2KB - Virtual size: 1KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 45KB - Virtual size: 44KB

.data
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 2KB

.stab
Size: 8KB - Virtual size: 8KB

.stabstr
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB