0ca8037fcdc79baa10bc2b18a51c906d

General

Target

0ca8037fcdc79baa10bc2b18a51c906d
Size

83KB
MD5

0ca8037fcdc79baa10bc2b18a51c906d
SHA1

d8c4f40ada8dc1f1a133b2d34dbeb9a23802a6e2
SHA256

cf2b97b53db682349770741557f302885e9e41dc07221f61d377d180326fa114
SHA512

6cf07a585b3f68820b75d4eabf79f5d90bdc767b93d575d885356769a19a34d9793fc08387ef204abcb5b9781cd617136eeb3bfc83f53598f787088c5dc1a3bf
SSDEEP

1536:5ZbnFFg9JHKav2GknHECyzb/7tvqKr04xeOUU+osw4n5rc:5ZvgLv2zY/7JPr0h8+ojcrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca8037fcdc79baa10bc2b18a51c906d

Files

0ca8037fcdc79baa10bc2b18a51c906d
.exe windows:5 windows x86 arch:x86

4ef05f0cb4137e806951791b00f450a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeA
VirtualAlloc
IsBadHugeReadPtr
VirtualProtect
GetLocaleInfoW
GetModuleHandleW
GetFileSize
GetSystemDirectoryW
FindNextFileA
GetModuleHandleA
MoveFileExW
FindNextChangeNotification
LoadLibraryA
WriteProcessMemory
ExitProcess
AddAtomA
CreateDirectoryA
GetProfileSectionA
GetFileTime
SetEvent
GetCurrencyFormatA
VirtualFree
VirtualFree

msvcrt

_mbctype
memcpy
is_wctype
_getcwd
iswxdigit
_creat
exit
abs
_ismbcprint
_fputchar
rename
_chkesp
_execv
fwrite
getenv

comdlg32

GetOpenFileNameW
FindTextW
GetFileTitleA
dwOKSubclass
PrintDlgA
PageSetupDlgW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ReplaceTextW

winmm

waveOutGetPitch
waveInGetErrorTextA
waveInGetPosition
WOW32DriverCallback
GetDriverModuleHandle
mixerMessage
midiInReset
mciLoadCommandResource
sndPlaySoundW
mid32Message

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ef05f0cb4137e806951791b00f450a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 19KB - Virtual size: 18KB

.rsrc Size: 38KB - Virtual size: 38KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 38KB - Virtual size: 38KB

.reloc
Size: 512B - Virtual size: 64B