0f3639acd7d7a4444d650b2998c19ae6

General

Target

0f3639acd7d7a4444d650b2998c19ae6
Size

23KB
MD5

0f3639acd7d7a4444d650b2998c19ae6
SHA1

d092175f90a2f0803dfee65678ccd46c8d92c29f
SHA256

ae433fac1fd404a90ba7180c5e06cd234c84b16968563fb1468cf187977971d6
SHA512

37c73f8fe9782c39adc32a4486cb3655e6163fcf94a08926d418589d0f93c269f1bcd4b09bce486be6cfd4a3b65ecb8dbf48779757a2266a881ff64bc22c5d37
SSDEEP

384:fhEBXFCub/owXXXPavp3hc/VXXX132ecV9Rkn12bWQystFoXXXXXXXXXXXXXXXXx:mB1NbTHSRSVHF3DcV9Rkn12SQywCHHHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3639acd7d7a4444d650b2998c19ae6

Files

0f3639acd7d7a4444d650b2998c19ae6
.exe windows:5 windows x86 arch:x86

2acd0ed7e8ae264bbd0f5ff4deda6608

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

gdiPlaySpoolStream
CloseMetaFile
RemoveFontResourceExA
GetSystemPaletteEntries
GdiGetLocalDC
SelectBrushLocal

msvcrt

wcsrchr
__isascii
_execlp
fopen
_getpid
_mbsnbcnt
_close
strncat
wcstoul
_ismbbtrail

kernel32

GetHandleInformation
SetCPGlobal
WriteProfileSectionW
CreateDirectoryW
DeleteFileW
DeleteFiber
LocalSize
CreatePipe
ValidateLocale
ValidateLCType
GetLocalTime
_lcreat
SleepEx
lstrcatA
GetVolumePathNameW

advapi32

QueryServiceStatus
RegReplaceKeyW
RegQueryMultipleValuesA
GetExplicitEntriesFromAclA
GetServiceDisplayNameW
AddAce
RegisterTraceGuidsA
AddAccessAllowedObjectAce
RegisterServiceCtrlHandlerExW

ole32

CoInitializeEx
PropVariantCopy
OleGetIconOfClass
IsValidPtrOut
CreateStreamOnHGlobal
CoTestCancel
CoSuspendClassObjects

user32

GetAppCompatFlags
CreateWindowStationW
GetProcessDefaultLayout
IsClipboardFormatAvailable
GetScrollPos
DrawCaptionTempW
GetCursorPos
GetClassLongW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2acd0ed7e8ae264bbd0f5ff4deda6608

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

kernel32

advapi32

ole32

user32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 5KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 5KB