0b3e574c372f4da130fd54517f73b0ac

General

Target

0b3e574c372f4da130fd54517f73b0ac
Size

282KB
MD5

0b3e574c372f4da130fd54517f73b0ac
SHA1

b6a387126e3d3e061afe56be5ee67b220522c896
SHA256

c64e6a504d3b2f2265f032a824f427e88207718293b0763050f605a1381968e6
SHA512

20ef6f2c8fb2c610ef5366162a0483986bbaef9137b5c17b850b7d325bc653248cdc73ef9828286ca7dc357c66c9fda2392aa13fcdec517de502eba7ab31dbd7
SSDEEP

6144:ePwKB8J8wlCzBX9dsf8/L0cBVkKfVJvUF2zZh4aFxuRHHvc1BnDqBk:eoo8JIBNK0/ZBqyVJvUgfcCke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b3e574c372f4da130fd54517f73b0ac

Files

0b3e574c372f4da130fd54517f73b0ac
.exe windows:4 windows x86 arch:x86

efabf2944ddfc414b256f0bb7f610e4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetStartupInfoA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__getmainargs
__p__fmode
__set_app_type
_controlfp
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_except_handler3
time
localtime
difftime
ctime
clock
asctime
__p__commode

msvcp60

??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

efabf2944ddfc414b256f0bb7f610e4a

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 277KB - Virtual size: 276KB

.data Size: 512B - Virtual size: 275KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 277KB - Virtual size: 276KB

.data
Size: 512B - Virtual size: 275KB

.rsrc
Size: 1KB - Virtual size: 1KB