0aa614690e2ef41e26fbf122484b9a04

General

Target

0aa614690e2ef41e26fbf122484b9a04
Size

244KB
MD5

0aa614690e2ef41e26fbf122484b9a04
SHA1

b868bb7fa92e8114a53c21d102c5283455c6263a
SHA256

43a0d3b5e460cca04c4fdf6e92ac124a8289f8dd717120861d5c441287352dd1
SHA512

48ba19391bee2d082085a92a83eb7962191fd7833bd1ac6d60e064c90ddf7b50f33fbe9b900bf6f21c1b2dcd0fe8cd2c23d230b1c2c41acafada63f9fcfe04d3
SSDEEP

6144:J6zCDeb5+zh8jFC/+RfakwQaM/ufMcsdHszhp:J6ac5+9YlskwQj/ufMdHup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa614690e2ef41e26fbf122484b9a04

Files

0aa614690e2ef41e26fbf122484b9a04
.exe windows:4 windows x86 arch:x86

19b6dfb8e05a5c763a3954ca98a8f594

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
CloseHandle
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
VirtualAllocEx
OpenProcess
WriteProcessMemory
VirtualProtectEx
VirtualProtect
Process32Next
Process32First
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
FlushFileBuffers

user32

DialogBoxParamA
GetDlgItemTextA
GetParent
GetWindowTextLengthA
GetWindowTextA
IsWindowVisible
EndDialog
GetDlgItem
SendMessageA
EnumWindows
SetDlgItemTextA
SetWindowTextA
MessageBoxA
FindWindowA
GetWindowThreadProcessId
CheckDlgButton
LoadIconA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19b6dfb8e05a5c763a3954ca98a8f594

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 212KB - Virtual size: 210KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 212KB - Virtual size: 210KB