0d9d25f3fd612c8db07a9827268acd12

General

Target

0d9d25f3fd612c8db07a9827268acd12
Size

50KB
MD5

0d9d25f3fd612c8db07a9827268acd12
SHA1

26962e386071d2c8e8f54d3915340b544944f86a
SHA256

5aa2e8e545ba0d526ece09368ab1d4739bc6918bfa541a948b6afe7ca8a8da7a
SHA512

d11ae1513832d51201ff1eedcb4357fa80f3753e329aae3ad2150fdf7f357b14d638b8a52356bf8a2af59b462e2331f3f5443b45c957f508096543ca68d25c1f
SSDEEP

768:oY8fJultAfLkep9v4K4j+8BtwY8fJultxY8fJultAfL7U5gsVnvfv:oY8RuluTbwKUtwY8RulLY8RuluT7Ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9d25f3fd612c8db07a9827268acd12

Files

0d9d25f3fd612c8db07a9827268acd12
.exe windows:4 windows x86 arch:x86

5532f639a4a6c131d83937f11f630d0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetVolumeInformationA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
GetComputerNameA
WriteFile
lstrlenA
GetSystemDirectoryA
GetFileType
GetCurrentProcessId
lstrcatA
GetWindowsDirectoryA
GetTickCount
GetVersionExA
Sleep
GetTempPathA
lstrcpyA
CreateProcessA

user32

FindWindowA
SendMessageA
wsprintfA
GetWindow
GetDlgItem

shell32

ShellExecuteExA
SHChangeNotify
SHGetSpecialFolderPathA

msvcrt

_strdup
strncpy
sprintf
atol
_except_handler3
atoi
rand
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
__CxxFrameHandler
strncat

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

shlwapi

PathGetDriveNumberA

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 46KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5532f639a4a6c131d83937f11f630d0e

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

msvcp60

shlwapi

wininet

Sections

.text Size: 46KB - Virtual size: 49KB

.rdata Size: 2KB - Virtual size: 2KB

.text
Size: 46KB - Virtual size: 49KB

.rdata
Size: 2KB - Virtual size: 2KB