0b4ca9b1f6d3a5af4366be7c356d36b418d21c6912f7abed95c5e1687f7912d8

General

Target

0b4ca9b1f6d3a5af4366be7c356d36b418d21c6912f7abed95c5e1687f7912d8
Size

32KB
MD5

46bd13266c7f2d840d18d47540ceac04
SHA1

be5f26d1bebaef8aa10b1b9daf8133a1eb29e5b4
SHA256

0b4ca9b1f6d3a5af4366be7c356d36b418d21c6912f7abed95c5e1687f7912d8
SHA512

cd71496bd02d37910abd391a691f01a6bdf806e70a1e22d00d1efe36e05a323fa7d4ebcf7ba43d76e84d59fd47c1d3d598f32b351f6b2316518be0973bb370a2
SSDEEP

384:i4/NqOGKjzP4B9+oB/1CgBDTI+8Z5uW9gdotOO:9PGSwBF1CEU+RsgDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4ca9b1f6d3a5af4366be7c356d36b418d21c6912f7abed95c5e1687f7912d8

Files

0b4ca9b1f6d3a5af4366be7c356d36b418d21c6912f7abed95c5e1687f7912d8
.exe windows:4 windows x86

ca9cd36d27ab7836d64fab01a175fe64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetExitCodeProcess
OpenProcess
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
Module32Next
GetModuleFileNameA
CloseHandle
Module32First
WaitForSingleObject
OpenEventA
OutputDebugStringA
GetModuleHandleA
GetCommandLineA

shell32

SHGetFileInfoA

mfc42

ord1575
ord561
ord815
ord800
ord537
ord2764
ord858
ord4278
ord5683
ord860
ord1168
ord540
ord2818

msvcrt

exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
atol
__CxxFrameHandler
_adjust_fdiv

msvcp60

??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0_Winit@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca9cd36d27ab7836d64fab01a175fe64

Headers

File Characteristics

Imports

kernel32

shell32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 548B

.rsrc Size: 16KB - Virtual size: 36KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 548B

.rsrc
Size: 16KB - Virtual size: 36KB