0af5fa5da6e83c097715d1932d67ec0d

Sharing

Copy URL Twitter E-mail

General

Target

0af5fa5da6e83c097715d1932d67ec0d
Size

33KB
MD5

0af5fa5da6e83c097715d1932d67ec0d
SHA1

ecbae9549ee326ad687a3aa75b286625871461e3
SHA256

5e6a69367ea11cbdf27e6dd4206593c730d3d60f6561f501238b6bea93fa629e
SHA512

84cc22b3a00969d492432878025ede558d4b948b52fb16e1737d1a276b6bae24e347f5dc72a812d92d1004127a0ee7e748ab111fbe425cbfa8f3ee4bce60e8e1
SSDEEP

384:akgtML9svX3DF5tf7cAdFjf5DBEERd7IgrRJ0BU16H85fV/MTxgLh4hh:Bg9nDFff7cgFjvEG7Io8BI6c1ygL6hh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af5fa5da6e83c097715d1932d67ec0d

Files

0af5fa5da6e83c097715d1932d67ec0d
.exe windows:4 windows x86 arch:x86

e8f5a3c8bdfc68754b9fc5d2bec90a65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegDeleteValueW
RegLoadKeyW
RegDeleteValueA
RegEnumKeyW
RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyW
RegLoadKeyA
RegQueryValueW
RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueA
RegFlushKey
RegQueryValueExW
RegEnumKeyW
RegOpenKeyW
RegGetKeySecurity
RegReplaceKeyA
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegEnumKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueA
RegOpenKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW

kernel32

FindFirstFileA
GetCPInfo
CopyFileExW
CreateProcessA
GlobalFree
CopyFileExA
FindAtomA
CopyFileA
GetConsoleMode
ExitThread
CopyFileW
Sleep
GetCommandLineA
CreateDirectoryA
ReadConsoleA
GetComputerNameA
DeleteFileW
GetFileSize
SetLastError
GetStdHandle
WriteFile
OpenFile
OpenFile
GetLastError
CreateDirectoryA
DeleteFileW
CreateProcessA
GetComputerNameA
GetStdHandle
DeleteFileA
GlobalFree
GetCommandLineA
GetFileSize
GetCPInfo
CopyFileExW
CopyFileW
CreateThread

comctl32

ImageList_Create
ImageList_DrawIndirect
ImageList_DragMove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Merge
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_AddMasked
ImageList_DrawEx
ImageList_Remove
ImageList_EndDrag
ImageList_Read
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Copy
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragMove
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
InitCommonControls
ImageList_Draw
ImageList_GetImageCount

gdi32

AddFontMemResourceEx
DeleteObject
AddFontResourceTracking
ClearBrushAttributes
ClearBitmapAttributes
AddFontResourceA
RestoreDC
BeginPath
SetTextColor
ExtTextOutA
GetClipBox
AddFontResourceExW
CloseFigure
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceExA
GetPixel
CopyMetaFileA
AbortPath
GetBitmapBits
CloseMetaFile
CloseFigure
SetTextColor
CreateSolidBrush
GetBrushOrgEx
GetCurrentPositionEx
ExcludeClipRect
BitBlt
CopyMetaFileA
ClearBitmapAttributes
CancelDC
BeginPath
AddFontMemResourceEx
RestoreDC
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceW
GetPixel
AddFontResourceExA
GetBitmapBits
GetPixel
AddFontResourceA
DeleteDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8f5a3c8bdfc68754b9fc5d2bec90a65

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

gdi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 22KB - Virtual size: 42KB

.rsrc Size: 1024B - Virtual size: 954B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 22KB - Virtual size: 42KB

.rsrc
Size: 1024B - Virtual size: 954B