0dc304a2e042c8270f2ed515fb723ec0

Sharing

Copy URL

Twitter E-mail

General

Target

0dc304a2e042c8270f2ed515fb723ec0
Size

102KB
MD5

0dc304a2e042c8270f2ed515fb723ec0
SHA1

0a4b1b5b5ada5dde83d0a321aa832bd880af05e8
SHA256

f237db18bae06b27b9625fa093496f10f94a1d44524984ad2342929a913b3f67
SHA512

0f8cafec921188b287c49323b089c636296d7e9091164e71198f994f7c3da084b4a2e61ca2298218d1dfd4a2a00ae229a46639f9c5ff3e3b36a9fe4d65da7fa1
SSDEEP

1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqb7yWe:4S2+1zCBJ+lfZU5P7K/yW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc304a2e042c8270f2ed515fb723ec0

Files

0dc304a2e042c8270f2ed515fb723ec0
.exe windows:4 windows x86 arch:x86

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA

kernel32

VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent

shell32

SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA

version

VerFindFileA
GetFileVersionInfoSizeA

gdi32

GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

Imports

user32

kernel32

shell32

version

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.tls Size: 67KB - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.tls
Size: 67KB - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: 1KB - Virtual size: 1KB