0bf6f96d9b8a5dd0fdef30ab84214964

General

Target

0bf6f96d9b8a5dd0fdef30ab84214964
Size

56KB
MD5

0bf6f96d9b8a5dd0fdef30ab84214964
SHA1

d6c64bd233ec134ccccf407ea079579947006bd0
SHA256

9e336fc602700ad55ef135e79fe0cd407d4c4a277b53fdee5589b6a87298f403
SHA512

638899e27b98735d4dd948bf5cd5f040453e7fa239b4d2c798dff895ff0346f4feecf779f7c83ac61ea787cf22622904d5ca996cf887b6346c8ff39425018cc7
SSDEEP

1536:Cm8fN3isbYWOCGbKa8nQqEq2Ym3+Tvqo0rV:P8V3i6qC/a+yYm3+TCo2V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf6f96d9b8a5dd0fdef30ab84214964

Files

0bf6f96d9b8a5dd0fdef30ab84214964
.exe windows:4 windows x86 arch:x86

874d28ac538e50a66f8a471f39f9e144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
FindResourceExW
DeleteFileW
GetSystemTime
LoadLibraryA
FindFirstFileW
SetFilePointer
SetEvent
GetFileSize
CreateProcessW
InterlockedDecrement
CreateWaitableTimerW
FindClose
MoveFileW
GetVersion
GetLastError
GetCurrentThreadId
WaitForSingleObject
WriteFile
GetLocalTime
GetLogicalDrives
WideCharToMultiByte
SizeofResource
GetProcAddress
FileTimeToSystemTime
FindResourceW
GetTickCount
CloseHandle
DuplicateHandle
GlobalFree

user32

TrackPopupMenu
DispatchMessageW
SetWindowPos
DestroyIcon
CreatePopupMenu
ReleaseCapture
RegisterWindowMessageW
PostThreadMessageW
DialogBoxParamW
AppendMenuW
DefWindowProcW
PostMessageW
GetSysColor
SendMessageW
wsprintfW
GetWindowThreadProcessId
GetCursorPos
IsWindow
SystemParametersInfoW
PostQuitMessage

gdi32

GetObjectW
CreateRoundRectRgn
SetBkMode
CreateSolidBrush
CreatePen
CreateICW
GetClipBox
SetBkColor
DeleteDC
GetStockObject

advapi32

SetSecurityDescriptorDacl
RegDeleteValueW
LookupPrivilegeValueW

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

874d28ac538e50a66f8a471f39f9e144

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB