0a65804bc7b3396fc58561ff42c50010

Sharing

Copy URL Twitter E-mail

General

Target

0a65804bc7b3396fc58561ff42c50010
Size

159KB
MD5

0a65804bc7b3396fc58561ff42c50010
SHA1

f37e17a17c380bc1d1e8959b856d905a3105948b
SHA256

9aea539b39e72f58559d6c17fedbc3cf2e0144b0252d37f5e730efb4e4a67fac
SHA512

fd0adfff0f499136ed7dcf3b750826f5ebde6bb71891a68e257340b712e27a489546a176264e871181e22fcbefe308bf3f8678cf6490fe29dc81b424543455ac
SSDEEP

3072:6mfH1vxQrp3ahrAngmUiC3jxsPwaJEI3KrfkcsrHTa47:6DNahAgE2xsPDJEIarTsHm4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a65804bc7b3396fc58561ff42c50010

Files

0a65804bc7b3396fc58561ff42c50010
.exe windows:4 windows x86 arch:x86

a6aaee97c9f8c4c4d8b4c04f7553c263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowEnabled
GetCapture
BeginPaint
TrackPopupMenu
GetCursorPos
EnumThreadWindows
IsChild
FindWindowA
GetClassInfoA
IsWindowVisible
GetDCEx
GetKeyState
EndDeferWindowPos
GetWindow
DrawFrameControl
RegisterClassA
GetCursor
MessageBoxA
GetFocus
GetMenuItemID
CreatePopupMenu

kernel32

GetOEMCP
DeleteFileA
GetStringTypeA
GetStdHandle
LockResource
lstrcpynA
SetEndOfFile
GetFileAttributesA
HeapDestroy
ReadFile
SetFilePointer
GlobalAlloc
lstrlenA
LoadResource
WaitForSingleObject
EnterCriticalSection
GetCurrentThread
GetUserDefaultLCID
lstrcpyA
SizeofResource
GetProcAddress
GetTickCount
GetModuleFileNameA
WideCharToMultiByte
FormatMessageA
CreateEventA
GetCurrentProcessId
GetLastError
HeapAlloc
EnumCalendarInfoA
lstrcatA
LoadLibraryA
GetCurrentThreadId
GetVersionExA
LocalFree
GetFileSize
VirtualAlloc
HeapFree
DeleteCriticalSection
CloseHandle
MoveFileA
GetSystemDefaultLangID
ExitProcess
GetCurrentProcess
GetStringTypeW
LoadLibraryExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

msvcrt

srand
tolower
sprintf
rand
exit
__p__commode
_stat
atol
_snprintf
_chsize
wcscspn
wcschr
_unlock

version

GetFileVersionInfoSizeA

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 7KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6aaee97c9f8c4c4d8b4c04f7553c263

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

msvcrt

version

Sections

CODE Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 2KB

.edata Size: 134KB - Virtual size: 133KB

BSS Size: 7KB - Virtual size: 82KB

INIT Size: 2KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 2KB

.edata
Size: 134KB - Virtual size: 133KB

BSS
Size: 7KB - Virtual size: 82KB

INIT
Size: 2KB - Virtual size: 1KB