0c8c6c484ae50e930147df35646a2657

General

Target

0c8c6c484ae50e930147df35646a2657
Size

122KB
MD5

0c8c6c484ae50e930147df35646a2657
SHA1

66aa1b2a847ca68b4736d36b9af2702c4d214d6f
SHA256

39f96e6dc8c37461a2aafe384e414ee88a4508dca7bc103ccf830e9be5989dac
SHA512

d46ea49403627b9dd3c9ddc83efbbcf7601e78f5115d0ed5ff9d20c8d27b89a91b047c1518627945a381774bcf8898cfe76278533a4bcfedbd44da68c28b6e48
SSDEEP

1536:JpqCcpdHxolQpTEjsJsj4k1uKkEUhZhyvXpFCnrEjYmvgndeKv2E6Xo:nToHxo6qj4EdHwZhYwqJgnKXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8c6c484ae50e930147df35646a2657

Files

0c8c6c484ae50e930147df35646a2657
.dll windows:4 windows x86 arch:x86

9f24f444812b4e5d0e905cbfec36e3a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetLocaleInfoW
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapAlloc
FatalAppExitA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
HeapFree
VirtualFree
HeapCreate
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
TlsGetValue
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringA
CompareStringW
GetLocalTime
WriteFile
GetTempPathA
WaitForMultipleObjects
OpenEventA
WaitForSingleObject
SetEvent
ResetEvent
ReleaseMutex
UnmapViewOfFile
IsBadWritePtr
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
IsBadReadPtr
GetVersion
CreateProcessA
GetVersionExA
OpenMutexA
Sleep
CloseHandle

user32

GetSystemMetrics
FindWindowA
LoadImageA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

uriFwqEye

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f24f444812b4e5d0e905cbfec36e3a2

Headers

File Characteristics

Imports

kernel32

user32

version

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.data Size: 106KB - Virtual size: 425KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 106KB - Virtual size: 425KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1KB - Virtual size: 1KB