0a3288b8517985fe3d3fd499980fce44

Sharing

Copy URL

Twitter E-mail

General

Target

0a3288b8517985fe3d3fd499980fce44
Size

320KB
MD5

0a3288b8517985fe3d3fd499980fce44
SHA1

4da042cf2d959baf5908459b60494ab382bb0d85
SHA256

e7d65245b2fb8a2a88875fa09be3bd4301afdeb429bebbce17f9811d679758be
SHA512

3ec8b169e4342b7d3f9688b787b4bc1d40ff3f21e029743accbea09ab66d7459ca94b92c7c47c892121425c5a2f19a1059a933aee921553cdd3315eab78ce456
SSDEEP

6144:0lu0FlSyb3TKbSXxB6jJSkZ2CcDca1/PtT5ddh2CPfqSS:0g0D7ybATNkIHAatN5d/Pfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a3288b8517985fe3d3fd499980fce44

Files

0a3288b8517985fe3d3fd499980fce44
.dll windows:4 windows x86 arch:x86

056473e53490259fa3771329b8466653

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCanonicalizeA

kernel32

Beep
SetLastError
SetInformationJobObject
lstrcmpiA
FindNextChangeNotification
QueueUserAPC
GetLargestConsoleWindowSize
lstrcpynW
FindNextVolumeA
EnumSystemLocalesA
GetFileType
FreeResource
ReadProcessMemory
GetProcessPriorityBoost
GetCurrentProcess
SetEndOfFile
CreateHardLinkA
FreeLibraryAndExitThread
BuildCommDCBAndTimeoutsW
CreateMutexA
GetDiskFreeSpaceExA
DefineDosDeviceA
GetSystemDefaultLCID
MulDiv
GetStartupInfoW
SetComputerNameW
SetLocalTime
SetConsoleCursorInfo
GetFileAttributesExW
GetFileAttributesW
FindResourceW
ExitThread
GetTimeZoneInformation
RequestWakeupLatency
GetCommConfig
FileTimeToLocalFileTime
GetLogicalDrives
GlobalAddAtomA
FindResourceExA
Sleep
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
ConvertDefaultLocale
InterlockedDecrement

ole32

OleRun

user32

IsClipboardFormatAvailable
DialogBoxIndirectParamW
OpenIcon
GetMenuItemRect
CallWindowProcA
InvalidateRgn
GetPropA
KillTimer
SetTimer
GetWindowThreadProcessId
CharLowerBuffA
CreateIconIndirect
UnhookWinEvent
SetCursorPos
VkKeyScanExA
GetDlgItemTextW
HideCaret
DragObject
OemToCharBuffA
ToAscii
GetCursorInfo
DlgDirSelectComboBoxExA
EmptyClipboard
GetClassInfoExW
LoadImageW
ChangeDisplaySettingsA
FindWindowA
SetCapture
GetSysColor
CountClipboardFormats
SetPropA
CheckMenuRadioItem
GetListBoxInfo
GetKeyNameTextW
SendMessageTimeoutW
BeginDeferWindowPos
ReleaseDC

advapi32

RegLoadKeyA

msvcrt

malloc
memset
free

winmm

mixerOpen

Exports

Exports

sawkzs

Sections

.text
Size: 313KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

056473e53490259fa3771329b8466653

Headers

File Characteristics

Imports

shlwapi

kernel32

ole32

user32

advapi32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 313KB - Virtual size: 402KB

.rdata Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 1B

.rdata Size: 512B - Virtual size: 1B

.rsrc Size: 1024B - Virtual size: 832B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 313KB - Virtual size: 402KB

.rdata
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 1B

.rdata
Size: 512B - Virtual size: 1B

.rsrc
Size: 1024B - Virtual size: 832B

.reloc
Size: 1KB - Virtual size: 1KB