00bab62b01645e1f571705bc49800bb6

Sharing

Copy URL Twitter E-mail

General

Target

00bab62b01645e1f571705bc49800bb6
Size

320KB
MD5

00bab62b01645e1f571705bc49800bb6
SHA1

3cf965b6602a04259cfcb6be711eb194f8b08e0c
SHA256

ca84c71b194346b0c180a54156c3e932dcb5dfe4cc4d8cea0edab07ae83c3b07
SHA512

56000cff215e2f8dd25a40987767b38a549f31872ab05360191f302c9090b49fd50e2ca9fef7798486691bcd2a32271d615cf3b02a9d5372ede6d7db3be884ed
SSDEEP

6144:SyMWrs0O3ZIVa3PR4zuO6M/xt7DLA/Gz99wvd0qB:CWrPlVs5fO6Mpt74/G9Rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00bab62b01645e1f571705bc49800bb6

Files

00bab62b01645e1f571705bc49800bb6
.dll windows:4 windows x86 arch:x86

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Draw
ImageList_Read

gdi32

SetPixel
SaveDC
CreatePalette
CopyEnhMetaFileA
GetBitmapBits
CreateCompatibleBitmap
CreateBitmap
SelectPalette

version

GetFileVersionInfoSizeA

kernel32

LocalAlloc
GetProcAddress
GetModuleHandleW
GetCommandLineA
lstrlenA
GetModuleHandleA
GlobalAlloc
ExitThread
IsBadReadPtr
ExitProcess
VirtualAllocEx
GetVersionExA
LoadLibraryA

Sections

CODE
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES2
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES4
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

Imports

comctl32

gdi32

version

kernel32

Sections

CODE Size: 109KB - Virtual size: 108KB

.data Size: 191KB - Virtual size: 190KB

RES1 Size: 1KB - Virtual size: 1KB

RES3 Size: 512B - Virtual size: 508B

RES9 Size: 2KB - Virtual size: 2KB

RES5 Size: 2KB - Virtual size: 1KB

RES2 Size: 512B - Virtual size: 481B

RES7 Size: 2KB - Virtual size: 1KB

RES4 Size: 1024B - Virtual size: 517B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 636B

CODE
Size: 109KB - Virtual size: 108KB

.data
Size: 191KB - Virtual size: 190KB

RES1
Size: 1KB - Virtual size: 1KB

RES3
Size: 512B - Virtual size: 508B

RES9
Size: 2KB - Virtual size: 2KB

RES5
Size: 2KB - Virtual size: 1KB

RES2
Size: 512B - Virtual size: 481B

RES7
Size: 2KB - Virtual size: 1KB

RES4
Size: 1024B - Virtual size: 517B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 636B