00c0ba9a4f5564dcbe79ec8858d08540177025c59337502241362c3344e653df

General

Target

00c0ba9a4f5564dcbe79ec8858d08540177025c59337502241362c3344e653df
Size

44KB
MD5

b409539a088a7a34d399295bfb9fa50d
SHA1

e240e5cbf49567a621e8155dd048f03fca12b38a
SHA256

00c0ba9a4f5564dcbe79ec8858d08540177025c59337502241362c3344e653df
SHA512

97a876843aceca437e3e14be136ce0c1fad3a11cdc859dcec42553ee07971b5a242a982a65371444b60efe5db3f43e5c8ba2b21724bfd011ca041edf462a8bfc
SSDEEP

768:hANB/Kqx+9zIUhKxMKH8H0lNUA/6RIXIDWkiNlAGSMI1DLYQVcTFhtZVp:hK/KC+R7hKZH8H0lNHSSYj82l1DLYQax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c0ba9a4f5564dcbe79ec8858d08540177025c59337502241362c3344e653df

Files

00c0ba9a4f5564dcbe79ec8858d08540177025c59337502241362c3344e653df
.exe windows x86

0b5be455b71af67323f005b7b84c5510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord823
ord5180
ord354
ord800
ord858
ord538
ord535
ord925
ord2810
ord540
ord389
ord2385
ord3210
ord2131
ord5918
ord5307
ord537
ord5706
ord668
ord5679
ord3176
ord4053
ord2773
ord2762
ord942
ord356
ord3012
ord6381
ord861
ord6640
ord4197
ord4273
ord5568
ord2910
ord922
ord860
ord4124
ord2756
ord5438
ord3313
ord801
ord6874
ord6921
ord6919
ord6655
ord541
ord2440
ord353
ord2813
ord3806
ord5436
ord6379
ord5446
ord6390
ord5830
ord2036
ord2795
ord825
ord1971
ord3658
ord665

msvcrt

wcstol
_wmkdir
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_wcsicmp
wcscmp
wcsrchr
__CxxFrameHandler
_waccess

kernel32

GetLocalTime
GetModuleFileNameW
GetLastError
WideCharToMultiByte

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b5be455b71af67323f005b7b84c5510

Headers

File Characteristics

Imports

mfc42u

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 984B

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 984B