0b17a754a87a1e5c8c03aba41938188d

Sharing

Copy URL Twitter E-mail

General

Target

0b17a754a87a1e5c8c03aba41938188d
Size

89KB
MD5

0b17a754a87a1e5c8c03aba41938188d
SHA1

a620cf085738f743781058f81d67add359cd524e
SHA256

bdc510ccc753c6ab18a830859b22d61092ddac699d42d504a440a6fd0d862d33
SHA512

51477b8606a5b5de10389be6755239a9fe8700ff1db5f056048dab4b8609ba475d78cf7e1447e36be8aaa55659439f5fe36af66aeb22c5b1c8774e93611a16f4
SSDEEP

1536:Vd4wjbhhDkHHF2tZW5RuUAC0P1wac1VbOhyuq9V:IwHzDkHHiW5MU01wxC7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b17a754a87a1e5c8c03aba41938188d

Files

0b17a754a87a1e5c8c03aba41938188d
.exe windows:4 windows x86 arch:x86

921d98dc9e2cfd60539278d44a3f8242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
lstrcpyA
DeleteFileA
GetModuleHandleA
GetLastError
GetCommandLineW
GetCommandLineA
GetLocalTime
GlobalAlloc
GetOEMCP
lstrcatA
GetLastError
Sleep
GetFileType
lstrcpynA
HeapAlloc
FreeConsole
GetFileType
FreeConsole
FreeLibrary
FreeConsole
GlobalAlloc
FreeConsole
GetLogicalDrives
FreeConsole
GetModuleHandleA
FreeConsole
Sleep
FreeConsole
GetLastError
FreeConsole
ExitProcess
ExitProcess
GetLastError
GetStringTypeW
GetCommandLineA
lstrcmpA
DeleteFileA
FreeLibrary
GetFileAttributesA
lstrcpyA
GetFileType
GetLocalTime
GetStringTypeA
GetLastError
lstrcpynA
HeapAlloc
GlobalFree
HeapFree
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
lstrcatA

user32

DrawTextA
GetDC
GetWindowTextLengthA
CopyImage
CloseWindow
AlignRects
GetFocus
DrawIcon
DrawTextW
EndDialog
BlockInput
CopyIcon
GetWindowTextA
AppendMenuW
IsMenu
GetCursor
GetMenu
DialogBoxParamA
GetDlgItem
CreateIcon
CopyIcon
AppendMenuA
LoadMenuA
CopyImage
CalcMenuBar
GetMenu
LoadCursorA
AppendMenuW
GetWindowTextA
AlignRects
GetWindowTextLengthA
InsertMenuA
EndDialog
GetFocus
DrawTextA
CopyRect
IsMenu
BlockInput
IsWindow
DrawTextW
CreateIcon

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bds
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.rsac
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

921d98dc9e2cfd60539278d44a3f8242

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 46KB - Virtual size: 46KB

.edata Size: 3KB - Virtual size: 7KB

.bds Size: - Virtual size: 2KB

.rsac Size: 12KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 46KB - Virtual size: 46KB

.edata
Size: 3KB - Virtual size: 7KB

.bds
Size: - Virtual size: 2KB

.rsac
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 4KB