0bc86760d9bf141eacf5898098772b7a

Sharing

Copy URL

Twitter E-mail

General

Target

0bc86760d9bf141eacf5898098772b7a
Size

563KB
MD5

0bc86760d9bf141eacf5898098772b7a
SHA1

905373059215c3051226b9f299114bc9ad05f5e0
SHA256

8949b249b5c218885063f8b785253910b8864c1535e6ac22cfd61c90404ef3d7
SHA512

eb192c8ae4eacf33e7b69c057240f7220de01c591d0c6b741d72784b15b38f4f86b9ae2fd5f7f2ca7af5a540fe338b0f6520fe750fd819892197c501671c7ba4
SSDEEP

12288:DASVTrB5C2FeKwg4kVgdfvcu3YPQBZlWOtNIObZgh:cSxrDhFeKwFVdcKhfNdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc86760d9bf141eacf5898098772b7a

Files

0bc86760d9bf141eacf5898098772b7a
.exe windows:4 windows x86 arch:x86

33c565a04dc80142224cb647a63c1504

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

UpdateICMRegKeyW
GetCharWidthA
SetPaletteEntries
GetTextAlign
GetWindowExtEx
GetObjectW
GetLogColorSpaceA
DeviceCapabilitiesExW
GetDIBColorTable
GetTextExtentPoint32A
SetWorldTransform
GetDeviceCaps
SetDIBitsToDevice

kernel32

GetCommandLineW
CreatePipe
MultiByteToWideChar
RtlUnwind
UnhandledExceptionFilter
GetSystemInfo
GetOEMCP
VirtualProtect
TlsSetValue
GetLocaleInfoW
CompareStringW
VirtualFree
HeapAlloc
LeaveCriticalSection
CreateMutexA
FlushFileBuffers
LCMapStringW
IsBadReadPtr
GetACP
TlsGetValue
SetEnvironmentVariableA
IsBadWritePtr
QueryPerformanceCounter
SetHandleCount
OpenMutexA
FreeEnvironmentStringsA
InterlockedExchange
TlsFree
IsValidCodePage
GetLocaleInfoA
LCMapStringA
SetStdHandle
GetStringTypeExW
GetSystemTimeAsFileTime
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
GetTimeFormatA
TlsAlloc
HeapFree
GetDateFormatA
InitializeCriticalSection
lstrcmpW
GetCommandLineA
SetThreadLocale
EnterCriticalSection
GetStringTypeA
GetEnvironmentStringsW
GetCPInfo
ExpandEnvironmentStringsA
GetLastError
GetCurrentThread
GetModuleFileNameA
GetProcAddress
GetCurrentProcessId
SleepEx
TerminateProcess
FreeEnvironmentStringsW
GetCurrentProcess
ExitProcess
SetFilePointer
IsValidLocale
WriteFile
ReadFile
CloseHandle
GetModuleHandleA
GetFileType
LoadLibraryA
GetStdHandle
CompareStringA
GetStringTypeW
HeapCreate
HeapDestroy
WideCharToMultiByte
GetTickCount
GetStartupInfoW
GetCurrentThreadId
HeapSize
GetModuleFileNameW
DeleteCriticalSection
GetTimeZoneInformation
VirtualAlloc
GetVersionExA
GetDiskFreeSpaceExW
EnumDateFormatsExA
GetStartupInfoA
SetLastError
GetFileAttributesExA
GetWindowsDirectoryW
HeapReAlloc
GetEnvironmentStrings

advapi32

CryptGetDefaultProviderW
LookupSecurityDescriptorPartsW

shell32

ExtractAssociatedIconExA
SHBrowseForFolderA

comdlg32

ReplaceTextW

user32

OpenWindowStationW
RegisterClassExA
RegisterDeviceNotificationA
RegisterClassA
EnumDisplayMonitors

comctl32

InitCommonControlsEx

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33c565a04dc80142224cb647a63c1504

Headers

File Characteristics

Imports

gdi32

kernel32

advapi32

shell32

comdlg32

user32

comctl32

Sections

.text Size: 225KB - Virtual size: 225KB

.rdata Size: 8KB - Virtual size: 19KB

.data Size: 316KB - Virtual size: 315KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 225KB - Virtual size: 225KB

.rdata
Size: 8KB - Virtual size: 19KB

.data
Size: 316KB - Virtual size: 315KB

.rsrc
Size: 12KB - Virtual size: 12KB