0980d7f2f0b1658d13311f1ac6acb5c3

General

Target

0980d7f2f0b1658d13311f1ac6acb5c3
Size

60KB
MD5

0980d7f2f0b1658d13311f1ac6acb5c3
SHA1

28b0fa1a0a540dbd32009f144cb3c502cfd47b51
SHA256

e511a22825577e4071eb283931e25b3ac52f759bf5bfca72e3dab6c775146380
SHA512

b9308548a6dd51e60ef4b669d5d4be9e270a2bc1364b1cdd68946c2e5c78d590e45067a333488d27adcdd879451b313e9a652467d69520a7bb9cfc54160677a8
SSDEEP

768:b1jHcYJFnlh49YaMu5WqsA7yYFAhvwxyUllvZZBTAuZO8aUqAxesLfrtQHdXaRo5:5HbnNg5gAegAKXptMhUJpLxo8oIeG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0980d7f2f0b1658d13311f1ac6acb5c3

Files

0980d7f2f0b1658d13311f1ac6acb5c3
.dll windows:4 windows x86 arch:x86

9b2bc32e675d36475a73fd031c085ac1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b2bc32e675d36475a73fd031c085ac1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 3KB