0cf04dcf0468484eb769a46366532e39

General

Target

0cf04dcf0468484eb769a46366532e39
Size

3.4MB
MD5

0cf04dcf0468484eb769a46366532e39
SHA1

1a15610c2a65674fa316c827eb61d1861b60862d
SHA256

6532f323bbb6da41ee57f3712ba6bb722bacb4fd7181cae8937ed8cdc5f7f6a2
SHA512

dff0ba2633b83e46dfe3e214d097b017d9e6f6e85b02d542987dd15cd9e35b33af8ffc300e0d82bc2044f6ff37fbb501d5cc6c5f4bed47a618e8ac7da251c339
SSDEEP

98304:Z41B5Wg+wAAbq0QOKrD8snUoVYoxkkG2:Z+B4GOOKcUUFP52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf04dcf0468484eb769a46366532e39

Files

0cf04dcf0468484eb769a46366532e39
.exe windows:4 windows x86 arch:x86

82a00143a29710636b5c99a764b01a4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCurrentProcess
QueryPerformanceCounter
UnhandledExceptionFilter
GetTickCount
MultiByteToWideChar
SetLastError
HeapFree
HeapAlloc
LocalFree
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
GetModuleFileNameW
IsDebuggerPresent
GetCommandLineW
FindClose
ReadFile
RaiseException
SetEvent
FormatMessageW
GetFileType
TlsGetValue
InitializeCriticalSection
HeapReAlloc
CreateEventW
TlsAlloc
HeapSize
WriteConsoleW
LoadLibraryExW
CreateThread
TlsFree
SetFilePointer
GetFileAttributesW
CompareStringW
GetModuleFileNameA
GetOEMCP
IsProcessorFeaturePresent
GetCommandLineA
DecodePointer
ResetEvent
ReleaseMutex
CreateFileA
GetFileSize
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
CreateDirectoryW
GetFullPathNameW
LoadResource
ExpandEnvironmentStringsW
CreateProcessW

user32

TranslateMessage
DestroyWindow
ReleaseDC
CreateWindowExW
GetDlgItem
GetSystemMetrics
GetDC
PostMessageW
SendMessageW
GetClientRect
SetWindowPos
EnableWindow
LoadCursorW
GetParent
SetWindowTextW
SetTimer
LoadIconW
SetForegroundWindow
BeginPaint
ScreenToClient
SetCursor
KillTimer
EnableMenuItem
GetWindow
GetWindowTextW
UpdateWindow
CharUpperW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82a00143a29710636b5c99a764b01a4f

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: - Virtual size: 612KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: - Virtual size: 612KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.idata
Size: 2KB - Virtual size: 1KB