0af27ef4afa43a37572b4e8d2bddeda6

Sharing

Copy URL

Twitter E-mail

General

Target

0af27ef4afa43a37572b4e8d2bddeda6
Size

32KB
MD5

0af27ef4afa43a37572b4e8d2bddeda6
SHA1

e414d1d9325f440664bd489ecfbfe11c81b3264a
SHA256

101ce1bd5e48453f0bebbe0f6245c587cdc333b62d8cfef60f92110879c4c9ca
SHA512

39d785ce2eefdb7162af98d71593027f8ebb720febd430378eb4de06b0af718f4b1cf513dd5b1dd93297be181bc6fd74ec8fc42c63e48261080925739e10da14
SSDEEP

768:a9rD3nFlpIpM0TDPcHIz/YgxQcSM5k8rraRy5IGwuc:CXHpQ7PcHIz/PxQPMNnaU56uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af27ef4afa43a37572b4e8d2bddeda6

Files

0af27ef4afa43a37572b4e8d2bddeda6
.exe windows:4 windows x86 arch:x86

fc3784917500bd609743cb4f34ef9c36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
CloseHandle
Heap32ListNext
lstrcpyn
GetAtomNameW
AddConsoleAliasW
MapViewOfFile
GetFullPathNameW
ClearCommBreak
GetConsoleAliasesLengthA
WritePrivateProfileSectionA
GetCPInfoExA
SetConsoleNumberOfCommandsA
GetEnvironmentVariableA
SetHandleInformation
SetDefaultCommConfigW
GetProcessTimes
SetTapePosition
GetConsoleWindow
GetSystemDefaultLangID
CreateJobObjectW
SetConsoleNumberOfCommandsW
SetUnhandledExceptionFilter
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

GetWindowContextHelpId
GetIconInfo
DdeDisconnectList
TrackPopupMenu
WaitMessage
EnumDesktopsA
WINNLSGetEnableStatus
IsCharUpperW

shell32

SHGetPathFromIDList
OpenAs_RunDLLW
SHLoadInProc
Control_RunDLLAsUserW
SHGetPathFromIDListA

gdi32

ExcludeClipRect
SetBrushOrgEx
CreateMetaFileA
SetPixel
ExcludeClipRect
PolyPolygon
GdiSetLastError
RectInRegion
GetROP2
EngTextOut
TextOutW
GdiInitSpool
OffsetViewportOrgEx
CreateFontIndirectA
SetColorSpace
GdiPlayPrivatePageEMF
XFORMOBJ_bApplyXform
GdiTransparentBlt
GdiConvertToDevmodeW
FrameRgn
GdiFixUpHandle

Sections

.text
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.akfif
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fc3784917500bd609743cb4f34ef9c36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

gdi32

Sections

.text Size: 4KB - Virtual size: 15KB

.data Size: 23KB - Virtual size: 24KB

.rsrc Size: 1024B - Virtual size: 4KB

.akfif Size: 2KB - Virtual size: 2KB

.reloc Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 15KB

.data
Size: 23KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 4KB

.akfif
Size: 2KB - Virtual size: 2KB

.reloc
Size: - Virtual size: 4KB