0e724b270dff7171df3357b1eba9ccf7

Sharing

Copy URL

Twitter E-mail

General

Target

0e724b270dff7171df3357b1eba9ccf7
Size

172KB
MD5

0e724b270dff7171df3357b1eba9ccf7
SHA1

b124e762cce3a2d191eb0a1a09436eeea935d445
SHA256

2aa886d61cca59210a311d66573974877e8e027efcae5a178a16d97623867564
SHA512

213eb87ef6fe52883622445e66842a6e5f37a61d2a1e51c23d062e008049154f2718c7195a876c826c74431155bb86d73fea6f639bcbd8f40c2c24e3f7e4f647
SSDEEP

3072:jIZbd4szw6E+qWpX95OOBQAt2JxjxDdDcGP2dOGWafrBrey2vxDHIC2LqjY+AMfl:giSwCbglvGjA4fJeyMVHI7LgU8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e724b270dff7171df3357b1eba9ccf7

Files

0e724b270dff7171df3357b1eba9ccf7
.exe windows:6 windows x86 arch:x86

8d2b32902a95170d6849dabd79a7edb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringW
CreateFileW
CreateProcessW
DecodePointer
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileA
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalFree
LockFileEx
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpW

comdlg32

FindTextW
GetOpenFileNameA
GetOpenFileNameW
PageSetupDlgW
PrintDlgExW
ReplaceTextW

loadperf

LoadPerfCounterTextStringsA
LoadPerfCounterTextStringsW

shell32

CommandLineToArgvW
DragFinish
SHGetDiskFreeSpaceA
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteA

pdh

PdhConnectMachineW
PdhEnumObjectsW
PdhGetCounterInfoA
PdhGetDataSourceTimeRangeW
PdhGetDefaultPerfObjectA
PdhGetDefaultPerfObjectW
PdhParseInstanceNameW
PdhRemoveCounter
PdhVbGetOneCounterPath
PdhVbIsGoodStatus

user32

CreateWindowExW
DefWindowProcW
DispatchMessageW
DrawTextW
EnumDisplaySettingsW
FillRect
GetClientRect
GetMenuItemInfoW
GetMessageW
GetNextDlgGroupItem
GetSysColorBrush
GetSystemMetrics
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsWindow
IsWindowVisible
LoadCursorW
LoadImageA
LoadImageW
MapWindowPoints
MessageBoxIndirectA
PostQuitMessage
RedrawWindow
RegisterClassW
SendMessageW
SetFocus
SetScrollRange
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
wsprintfW

rpcrt4

I_RpcGetBufferWithObject
I_RpcIfInqTransferSyntaxes
I_RpcNsBindingSetEntryNameW
NDRSContextUnmarshall
NdrEncapsulatedUnionMarshall
NdrNonConformantStringUnmarshall
RpcEpRegisterNoReplaceW
RpcMgmtEpEltInqDone
RpcObjectSetType
RpcServerUseAllProtseqs
RpcServerUseAllProtseqsEx
RpcSmSetThreadHandle

mscms

EnumColorProfilesA
GetColorDirectoryW
GetCountColorProfileElements
GetPS2ColorRenderingIntent
GetStandardColorSpaceProfileW
InstallColorProfileW
IsColorProfileTagPresent
SetColorProfileElementSize

gdi32

BitBlt
CreateCompatibleDC
CreateFontW
CreateSolidBrush
GetObjectW
GetStockObject
SelectObject
SetBkColor
SetBkMode
SetTextColor

winmm

PlaySoundW

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 282B

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d2b32902a95170d6849dabd79a7edb7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

loadperf

shell32

pdh

user32

rpcrt4

mscms

gdi32

winmm

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 5KB

.00cfg Size: 512B - Virtual size: 8B

.voltbl Size: 512B - Virtual size: 282B

.rsrc Size: 512B - Virtual size: 424B

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 5KB

.00cfg
Size: 512B - Virtual size: 8B

.voltbl
Size: 512B - Virtual size: 282B

.rsrc
Size: 512B - Virtual size: 424B