0d8d0238891c531eb1bddbeccf4119f5

Sharing

Copy URL

Twitter E-mail

General

Target

0d8d0238891c531eb1bddbeccf4119f5
Size

133KB
MD5

0d8d0238891c531eb1bddbeccf4119f5
SHA1

c70533c961a620efd0c513feabe535963a4677ac
SHA256

a544698f0d365fdeaf4fac5e6234fd07607ead221dc1b94be0a2e331f91be924
SHA512

9b5b25f7aeaac72e7d18c8f0ff69758aedf55f35df94db09ca596aa34d4f941f4bf95796116ec93414821a7327638e1b5055b8865f9f16a8360e242183a65469
SSDEEP

3072:ZG1e+wuwxt3dT921VON3e7PD6gjc/VtGFger:Zn+wuwx1dg19jc/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d8d0238891c531eb1bddbeccf4119f5

Files

0d8d0238891c531eb1bddbeccf4119f5
.exe windows:5 windows x86 arch:x86

271c05361458819bbdb90713df1859d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtect
GetStringTypeA
GetUserDefaultLangID
DeviceIoControl
CreateFileMappingA
SetCurrentDirectoryA
RemoveDirectoryA
GetModuleHandleA
lstrcpyA
GetStartupInfoA
GlobalHandle
GetLocalTime
GetStdHandle

msvcrt

__set_app_type
_getcwd
__p__commode
srand
strspn
_adjust_fdiv
_snprintf
strcpy
exit
__getmainargs
signal
_initterm
malloc
__setusermatherr
_acmdln
__p__fmode
_except_handler3
_XcptFilter
remove
log

user32

MessageBeep
EndDialog
UpdateWindow
DrawTextA
LoadIconA
SetWindowLongA
SendDlgItemMessageA
IntersectRect
GetCursorPos

ole32

ReleaseStgMedium
OleInitialize
CreateILockBytesOnHGlobal
CoTaskMemFree
IIDFromString
StgOpenStorageOnILockBytes
CoTaskMemRealloc
CoSetProxyBlanket
StgOpenStorage
StringFromGUID2
CreateStreamOnHGlobal
IsAccelerator
CoLoadLibrary

version

GetFileVersionInfoA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
VerInstallFileW
GetFileVersionInfoSizeW
VerFindFileW

advapi32

CryptReleaseContext
EqualSid
OpenThreadToken
DeleteService
CheckTokenMembership
RegQueryValueA
CryptHashData

shell32

SHAddToRecentDocs
SHGetDiskFreeSpaceExW
ShellExecuteW
SHGetDesktopFolder
ShellExecuteExA
ExtractIconExA

gdi32

CreateFontA
SetPolyFillMode
RestoreDC
LineDDA
FillRgn
SelectObject
GetTextExtentPointW
DeleteObject
GetDIBits

oleaut32

SafeArrayGetElement
SafeArrayPutElement
CreateErrorInfo
SysFreeString

comctl32

CreatePropertySheetPageA
ImageList_BeginDrag
CreateToolbarEx
ImageList_AddMasked
ImageList_Remove
ImageList_SetImageCount
ImageList_SetBkColor
ImageList_DragShowNolock
DestroyPropertySheetPage

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

271c05361458819bbdb90713df1859d9

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ole32

version

advapi32

shell32

gdi32

oleaut32

comctl32

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 48KB - Virtual size: 48KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 19KB - Virtual size: 19KB