0b124a35686f686c0d80ed6f1c5155de

General

Target

0b124a35686f686c0d80ed6f1c5155de
Size

22KB
MD5

0b124a35686f686c0d80ed6f1c5155de
SHA1

57783ff5b2ec605ecb2357ea025604de6086557e
SHA256

e12a7b8e61de8d43494040de92c8dce6421b92f42bbf92b4b408601f0f87aee2
SHA512

4afe56902be0e7896b4e6554ea6c24a62170bbdd98de70f8d1a509b1204abd334d08c5809c7d9eae29edccb057d57d5d751d174f5b81119b22daf8993d53998f
SSDEEP

384:rFqpdCOp9M9+81iS0a/yQP2DviLWGzR/RFkGLh:rFyAG9C+8gpaxebiDz5HpLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b124a35686f686c0d80ed6f1c5155de

Files

0b124a35686f686c0d80ed6f1c5155de
.dll windows:4 windows x86 arch:x86

6a15f741ecfac8ecb879884462c4e3a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVolumeInformationA
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

msvcrt

_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocStringByteLen
VariantInit

user32

wsprintfA

Exports

Exports

DllMain
Main
before1main
prestart
start

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a15f741ecfac8ecb879884462c4e3a3

Headers

File Characteristics

Imports

kernel32

msvcrt

ole32

oleaut32

user32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 292B

.rdata Size: 1024B - Virtual size: 548B

.bss Size: - Virtual size: 11KB

.edata Size: 512B - Virtual size: 295B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 292B

.rdata
Size: 1024B - Virtual size: 548B

.bss
Size: - Virtual size: 11KB

.edata
Size: 512B - Virtual size: 295B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB