0c13840c7be2200e5aceeb3975a1bd4d

Sharing

Copy URL

Twitter E-mail

General

Target

0c13840c7be2200e5aceeb3975a1bd4d
Size

89KB
MD5

0c13840c7be2200e5aceeb3975a1bd4d
SHA1

da3a0ad2074d65f58fbad33da2ad40c40e0c9865
SHA256

2cdd2f4e9e2d47505ba240cf43f6869e9921df6d6c522a7814e0a5ef306ff339
SHA512

c4b6f3a42cbf371ad369d5a83c0583cbe42ff76e9d6ca2685d3b7c2bd883e92632dc7795b7236bfbef5c5ea10d905d51803497bf5fa5c1dbdc289545cdc39146
SSDEEP

1536:swL+euwJiLFNsPU5G5KQpPrZjq84Iw0FIz2QE1ClhAHzX:socLnsPUT2zZjrQUMor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c13840c7be2200e5aceeb3975a1bd4d

Files

0c13840c7be2200e5aceeb3975a1bd4d
.exe windows:5 windows x86 arch:x86

4aa9380192de6350796d6ec130f89b1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetProcAddress
HeapAlloc
GetProcessHeap

user32

LoadIconA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x1uri
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x2uri2
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x3uri3
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x5uri4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x6uri4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x7uri4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4aa9380192de6350796d6ec130f89b1e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 80KB - Virtual size: 80KB

.x1uri Size: 512B - Virtual size: 4B

.x2uri2 Size: 512B - Virtual size: 4B

.x3uri3 Size: 512B - Virtual size: 4B

.x5uri4 Size: 512B - Virtual size: 4B

.x6uri4 Size: 512B - Virtual size: 4B

.x7uri4 Size: 512B - Virtual size: 4B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 464B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 80KB - Virtual size: 80KB

.x1uri
Size: 512B - Virtual size: 4B

.x2uri2
Size: 512B - Virtual size: 4B

.x3uri3
Size: 512B - Virtual size: 4B

.x5uri4
Size: 512B - Virtual size: 4B

.x6uri4
Size: 512B - Virtual size: 4B

.x7uri4
Size: 512B - Virtual size: 4B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 464B