0bd1d9090a1c28b97612f7d3e9e97f0e

General

Target

0bd1d9090a1c28b97612f7d3e9e97f0e
Size

28KB
MD5

0bd1d9090a1c28b97612f7d3e9e97f0e
SHA1

0bc156f4c56d5dd5a26fba53e999bef7fcd47d69
SHA256

19b796bc8c89328866057a7b1b39a039676ad45a13516af825c2073dbca23887
SHA512

27938cf60e0e1bbd8f8a9a2f699211ea7d59be960dcaf27a1b7669a753ee76083e9b995b7a1c4bf75dadc6626d3c9f1f2e073aac7460945aacce7e39db5003bf
SSDEEP

384:ClCJ95XYjCJvnx387TrBRJ1SldKqzbfXYlRG/K6PH1T3Qj+U2xPkulrJuMMd:GCJkxJ1kRzbPYGKEVAn2xlr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd1d9090a1c28b97612f7d3e9e97f0e

Files

0bd1d9090a1c28b97612f7d3e9e97f0e
.exe windows:4 windows x86 arch:x86

ef5df2f3a84c745fa8f7329a4c81c60b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetLastError
CreateFileA
WideCharToMultiByte
WaitForSingleObject
Sleep
LoadResource
CloseHandle
DeleteFileA
ExitThread
GetFileAttributesA
GetModuleFileNameA
lstrcpyA
lstrcatA
GetProcessHeap
CreateEventA
FindResourceA
ExitProcess
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
lstrcmpA
lstrlenA
SetEvent
LoadLibraryW
ResetEvent
WaitForMultipleObjects
CreateThread
WriteFile

user32

TranslateMessage
BeginPaint
DispatchMessageA
SetThreadDesktop
PeekMessageA
CreateWindowExA
ShowWindow
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
wsprintfA

advapi32

RegOpenKeyExA
RegLoadKeyA
RegOpenKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoUninitialize
CoInitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef5df2f3a84c745fa8f7329a4c81c60b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 13KB