0b174a670fd29bea34dd107bd2d21981

General

Target

0b174a670fd29bea34dd107bd2d21981
Size

276KB
MD5

0b174a670fd29bea34dd107bd2d21981
SHA1

7a92c2a6eda94966a3724079fcb61f476a3146e5
SHA256

6d1869597fd531fe8a09c5c1b9d9889675d2e447efa7a511e59f7d470024f5fc
SHA512

f91bd099aebeaa73c014c403835e1ef2c13a496baaa343780824bd8e2dfa69372c78fc4b99019f6de261095d1191f3fee345ce91c6e8698b717a5d2cacd4a0ee
SSDEEP

6144:8KIMCcnGYZoL5Lv35L0eJNfO26WriyaziLPPeupSXa:8tMLnGYuLVv35L0eJNfNZiyCibPeUSXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b174a670fd29bea34dd107bd2d21981

Files

0b174a670fd29bea34dd107bd2d21981
.exe windows:4 windows x86 arch:x86

ca338983c9e84b5e2cabf772cc0a74df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GlobalAlloc
FindNextChangeNotification
WaitForSingleObject
SetWaitableTimer
LoadResource
GetTickCount
GlobalFree
DuplicateHandle
GetLocalTime
SizeofResource
InterlockedIncrement
LockResource
ExitProcess
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetLogicalDrives
MulDiv
GetPrivateProfileStringW
GlobalDeleteAtom
lstrlenW
WaitForMultipleObjects
SetLastError
GlobalAddAtomW
InterlockedDecrement
MoveFileW
LoadLibraryW
FileTimeToSystemTime
WritePrivateProfileStringW
CreateFileW
Sleep
QueryDosDeviceW

user32

LoadCursorW
AppendMenuW
wsprintfW
DestroyIcon
PostThreadMessageW
ReleaseDC
RegisterHotKey
SetLayeredWindowAttributes
SetCursorPos
SystemParametersInfoW
LoadBitmapW
DefWindowProcW
DialogBoxParamW

gdi32

SetMapMode
GetStockObject
DPtoLP
LineTo
SetTextColor
GetObjectW
CreateRoundRectRgn
BitBlt
CreateCompatibleDC
CreateBitmap
CreateFontIndirectW
GetClipBox
SelectObject

advapi32

GetUserNameW

oleaut32

OleLoadPicture

Sections

.text
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca338983c9e84b5e2cabf772cc0a74df

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

Sections

.text Size: 244KB - Virtual size: 241KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 21KB

.text
Size: 244KB - Virtual size: 241KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 21KB