0b4c4f8de26a712e77411f7e213d84e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b4c4f8de26a712e77411f7e213d84e2
Size

104KB
MD5

0b4c4f8de26a712e77411f7e213d84e2
SHA1

e627f7bfbe67e26c90d94a4e72deb760bcfd78c7
SHA256

3076f5268cdbbcd9a2b05a438f42d4d5868bf26db526653aadfbb4ede515c256
SHA512

572eee0bd4795049e2e84d75ce4631c8863e33f092f6ef9d0144f9b5c68bcf5cd7a92525263a34616dd34d6bd82840d7ba95aac354b6c038ddc2f5001b3e94f8
SSDEEP

1536:pXmqFGOIbaxojQSHvRF2J7Z+P6nlSYfgFafFkWGq6cjTA:1mqGnaxEXRF2FZ+P0fgFadkWGqzjTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4c4f8de26a712e77411f7e213d84e2

Files

0b4c4f8de26a712e77411f7e213d84e2
.dll windows:4 windows x86 arch:x86

c3016792476bcd1a8dd9ce5248111d19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetCurrencyFormatA
GetFileInformationByHandle
GetVersionExA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
GetStockObject
DeleteDC

Exports

Exports

iuatfow

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ