0f02bb13c137ab98d6a991c80b8ae09c

General

Target

0f02bb13c137ab98d6a991c80b8ae09c
Size

464KB
MD5

0f02bb13c137ab98d6a991c80b8ae09c
SHA1

93b4898e4ccd58cb195deebcc35cae9adf1c600e
SHA256

e9d63820392ac8bbdc2adb65e1f6238c4f5b6ca1e99c7883168d2e563ac83910
SHA512

9e369f2b108ccdbc7de68a54d43ccc87f36056a88959f01e487077dcb2d5de396711bc4d623681d76a1b9bc8cbccd62e0babdd7f9e8c41d9f47d92cb83004731
SSDEEP

12288:zVHdvbRQ44buWwPqZg5jKcMziKceehL7oZWkFIfC4:zV9V2pAqZg5jDMzJceehL0ZR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f02bb13c137ab98d6a991c80b8ae09c

Files

0f02bb13c137ab98d6a991c80b8ae09c
.exe windows:4 windows x86 arch:x86

7e0c1451d36e17cd8fbb5c7b8b354605

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
FindResourceA
GetCurrentThreadId
TlsSetValue
InterlockedDecrement
CreateEventA
VirtualFree
InitializeCriticalSection
QueryPerformanceCounter
TerminateProcess
LocalFree
HeapReAlloc
GetSystemTimeAsFileTime
ResetEvent
SetUnhandledExceptionFilter
InterlockedExchange
GetModuleHandleA
CreateThread
RaiseException
FileTimeToSystemTime
InterlockedCompareExchange
GlobalLock
GetCommandLineA
MultiByteToWideChar
GetCPInfo
GetCurrentProcessId
GetEnvironmentStrings
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
GetTickCount
LCMapStringA
FreeLibrary
WaitForSingleObject
LoadLibraryW
GetSystemInfo
LCMapStringW
EnterCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
VirtualAlloc
GetStartupInfoA
GetVersion
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
LeaveCriticalSection
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW

user32

FillRect
LoadIconA
CreateWindowExA
InvalidateRect
SetWindowTextA
ReleaseDC
GetSysColor
TranslateMessage
SetWindowLongA
PostMessageA
GetMessageA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7e0c1451d36e17cd8fbb5c7b8b354605

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 408KB - Virtual size: 406KB

.data Size: 28KB - Virtual size: 30KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 408KB - Virtual size: 406KB

.data
Size: 28KB - Virtual size: 30KB