096478ebe0493136d13b3d00cd1b9956

General

Target

096478ebe0493136d13b3d00cd1b9956
Size

13KB
MD5

096478ebe0493136d13b3d00cd1b9956
SHA1

7316fd7697b481c61dc02ad9644d21d60b3a05b8
SHA256

9934544513f0c5ce50d4579de0e6788ff778a2d83fdf92595fa1a9102b60dd04
SHA512

54fb765ce0dde6745b224a4a8254d519504995f74f3db21232c4fe1ce90963250acbb2bd4e6daf7dca89bc296bc845873627190396deaaf4277648c657e22994
SSDEEP

192:kqhSCV2UUnhGEJbECuh86oJ0yy1T9zHJw4FGj0hPT/M:kFNGEOBhZS0yqT70Ah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096478ebe0493136d13b3d00cd1b9956

Files

096478ebe0493136d13b3d00cd1b9956
.dll windows:4 windows x86 arch:x86

7e493ceaffe8175007a9bc93a0843315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
OpenMutexA
GetTempPathA
FreeLibrary
CreateEventA
ExitProcess
GetProcAddress
GetVolumeInformationA
GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetVersion
GetSystemDirectoryA
Sleep
LoadLibraryA
CloseHandle
SetEvent
OpenEventA
GetCurrentProcessId
ReleaseMutex

user32

CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ToAscii
GetKeyboardState
SendMessageA
IsWindow

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA

wininet

InternetSetOptionA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile

msvcrt

strcat
malloc
free
_beginthreadex
sprintf
atoi
strchr
strcpy
_adjust_fdiv
_initterm
_onexit
__dllonexit
memcpy
fclose
fwrite
strlen
fopen
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
strrchr

avicap32

capCreateCaptureWindowA

Exports

Exports

CharkPlay

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e493ceaffe8175007a9bc93a0843315

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcrt

avicap32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 3KB

Shared Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 566B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 3KB

Shared
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 566B