0bbc9fadf4e6f47f8174644d41ffac58

General

Target

0bbc9fadf4e6f47f8174644d41ffac58
Size

132KB
MD5

0bbc9fadf4e6f47f8174644d41ffac58
SHA1

268349f5584d1a855ace1e973b25fa9af1f6ca8c
SHA256

5abf81a67330e4ad33955a500b6169ec6a08aefd16086f95ed61855373ddb054
SHA512

fa081cb84ca6a56a84985447224a8deb997139f4757d9b06995b6e523c2155ced54218229ebe754bdee1c97c257a24a1d737181f6e4859323e13e53af25033ab
SSDEEP

3072:Vy3macNoJaGL+GELMscumWMAFFgeipFUx:cmrjFilpFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbc9fadf4e6f47f8174644d41ffac58

Files

0bbc9fadf4e6f47f8174644d41ffac58
.exe windows:4 windows x86 arch:x86

be882859355e532cdd47c1e71eabca32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
WinExec
GetVersionExA
Sleep
LoadLibraryA
GetProcAddress
CreateFileA
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle

user32

DispatchMessageA
ShowWindow
TranslateMessage
PostQuitMessage
GetMessageA
GetDesktopWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA

advapi32

GetUserNameA
OpenServiceA
StartServiceA
OpenSCManagerA
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
ConvertSidToStringSidA
LookupAccountNameA
DeleteService
CreateServiceA
RegCloseKey

dbghelp

ImageNtHeader

msvcrt

exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
fclose
fflush
fwrite
fopen
sprintf
rand
_access
srand
time
strstr
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
_strlwr
_acmdln
__getmainargs
_initterm
__setusermatherr

shlwapi

SHDeleteKeyA
StrStrA
SHSetValueA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be882859355e532cdd47c1e71eabca32

Headers

File Characteristics

Imports

kernel32

user32

advapi32

dbghelp

msvcrt

shlwapi

version

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 104KB - Virtual size: 101KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 104KB - Virtual size: 101KB

.rsrc
Size: 4KB - Virtual size: 1KB