0b0bc4ffd0f92146a4f80504965a0cac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b0bc4ffd0f92146a4f80504965a0cac
Size

7KB
MD5

0b0bc4ffd0f92146a4f80504965a0cac
SHA1

86956a7c4eb2c5d22698f8a47044d9cc3d1f1935
SHA256

e979eab779d5d808be6623a6f52529b7de083c6e88e67ad77c263ec18e4e78ef
SHA512

f3a22912431f5595cfb875bfb3061bea6ebdc2b1d7b8fc94936d0ea0bb24ea4d918f7f30ec2fef5dcb4ce362b01f8392b1597a1ad6ad0e4dbfa1c07f7fb99f51
SSDEEP

96:rYphiNYD4ubgbzumwY/TiY2Otg3A73VMQuUQfK:kiNK7nxY2Otg3AuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b0bc4ffd0f92146a4f80504965a0cac

Files

0b0bc4ffd0f92146a4f80504965a0cac
.dll windows:4 windows x86 arch:x86

e0a3278cddafa2165c7e46c980ac5195

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

UnhookWindowsHookEx
ToAscii
SetWindowsHookExA
OpenClipboard
GetWindowTextA
GetKeyboardState
GetKeyNameTextA
GetForegroundWindow
GetClipboardOwner
EmptyClipboard
CloseClipboard
wsprintfA

kernel32

GetFileSize
WriteFile
Sleep
SetFilePointer
GetWindowsDirectoryA
CreateThread
CreateFileA
CloseHandle
lstrlenA
lstrcpyA
lstrcatA

shlwapi

StrStrIA

Exports

Exports

Install
Uninstall

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ