0f90c57f0cfaa5f0c41d298795b0a8af

General

Target

0f90c57f0cfaa5f0c41d298795b0a8af
Size

215KB
MD5

0f90c57f0cfaa5f0c41d298795b0a8af
SHA1

61d787db9960990e1c8cde6988330afb42dc1b4e
SHA256

43f73f7e50ee7608fd1fa98684faa06ce16275cc15d7cbd902aa799ca542f931
SHA512

dc62c7516c141ef79c508ef18a418c5a3655117cc92c49ea690bc5180f56ce59373e2151ae9c171454642fa163ad837a01d1e06d07cca103b8d6faac93929dc9
SSDEEP

6144:lbbOpezXmwUcZeAHPeuPbf4lv+uUbW6y3/tWM0:lbCpermDcZeHuP7SPT6MU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f90c57f0cfaa5f0c41d298795b0a8af

Files

0f90c57f0cfaa5f0c41d298795b0a8af
.exe windows:5 windows x86 arch:x86

f2379c1ff2790d5cddff57869017db86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

Chord
Arc
BeginPath
CreateBitmap
AnimatePalette

kernel32

GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
HeapSize

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2379c1ff2790d5cddff57869017db86

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 165KB - Virtual size: 165KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 165KB - Virtual size: 165KB