0fa09aba8625f6671b997b41542d8316

Sharing

Copy URL Twitter E-mail

General

Target

0fa09aba8625f6671b997b41542d8316
Size

1.1MB
MD5

0fa09aba8625f6671b997b41542d8316
SHA1

55373d56e74f8879db8a93a5075599905758c030
SHA256

6dcb3e55704e04d02ced719691d11275e014730b9b37005ce6f490068ced2b91
SHA512

a069bcde2c18938a9f3ba522f9106b2f6193c52d7d6404a204027ecf6ceda383cb3b608626f22a1b639907daee07a50b1872296742c53fa5810c2bf763566732
SSDEEP

3072:5yMkekfD4cdHn9o8FR+CiBDgLbHdqnh2rFH5z+eTeBmAOhHPzaHlRBlsRB46L:5e74cUBDgLbeIz96kLhLaHlRB2RB4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa09aba8625f6671b997b41542d8316

Files

0fa09aba8625f6671b997b41542d8316
.exe windows:5 windows

e5c11daa24dc8b401ea8c36bae96968d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
GetModuleHandleA
GetTickCount
DuplicateHandle
GetProcessHeap
Sleep
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetFileType
LCMapStringW
GetStringTypeW
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
CreateFileW
EnterCriticalSection
SetLastError
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
GetLastError
GetCurrentProcess
GetProcAddress
VirtualProtect

shell32

DragQueryFileA
SHChangeNotify
DragAcceptFiles
SHGetFolderPathA
SHGetFileInfoA
SHGetFolderPathW

ole32

OleFlushClipboard
CoCreateGuid
OleInitialize
ReleaseStgMedium
RegisterDragDrop

gdi32

CreateHatchBrush
GetDIBits
CreateDCW
CreateCompatibleDC
GetCharacterPlacementA
GetOutlineTextMetricsW
GetPolyFillMode
CreateFontA
AddFontResourceA
GetBoundsRect
GetCharacterPlacementW
CreateBitmap
GetObjectW
GetFontData
CreateColorSpaceA
GetCurrentObject
BitBlt
GetPath
CreateScalableFontResourceW
CreateFontIndirectW
CreateRectRgn
CancelDC
CreateFontW
CreatePen
GetObjectType
GetColorSpace
CreateFontIndirectExA
CreateEllipticRgn
CreateDIBitmap
CreateFontIndirectExW
GetBitmapBits
CreateDiscardableBitmap
GetGlyphIndicesW
AnimatePalette
CreateDCA
CreatePalette
CreateSolidBrush
DeleteDC
ChoosePixelFormat
CreateDIBPatternBrushPt
GetPixelFormat
GetClipRgn
GetDeviceCaps

user32

GetMenuDefaultItem
EnumDisplayMonitors
CreateWindowExW
FlashWindow
OemToCharBuffA
DefDlgProcA
GetCursor
GetLastActivePopup
FindWindowA
RegisterClipboardFormatA
GetNextDlgTabItem
SendMessageA
EqualRect
InsertMenuItemA
GetPropA
CharNextA
EndPaint
GetWindowLongA
GetClientRect
CreateDialogIndirectParamA
SetDlgItemInt
SetDlgItemTextA
DeferWindowPos
IsWindowVisible
IsDialogMessageA
ReleaseDC
wsprintfA
GetDC
PtInRect
LoadStringW
InSendMessage
DrawIconEx
DrawTextExA
SetTimer
GetWindowTextA
GetCursorPos
GetSysColor
CreatePopupMenu
IsIconic
SetDlgItemTextW
SendMessageW
GetDlgItemTextW
GetSystemMenu
DialogBoxParamW
CreateDialogParamA
PostMessageA
EndDeferWindowPos
SetRectEmpty
SetRect
CharLowerA
SetMenu
GetClassInfoW
CharPrevA
RemoveMenu
CharUpperA
LoadImageA
MonitorFromWindow
GetWindowTextLengthA
BeginDeferWindowPos
GetDlgItem
CloseWindow
TranslateMessage
MonitorFromRect
DispatchMessageA
GetDlgItemInt
GetKeyNameTextA
GetMessagePos
GetMonitorInfoA
MessageBoxW
PeekMessageW
DestroyMenu
DispatchMessageW
DrawFocusRect

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 999KB - Virtual size: 1003KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5c11daa24dc8b401ea8c36bae96968d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

gdi32

user32

advapi32

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 999KB - Virtual size: 1003KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 999KB - Virtual size: 1003KB

.reloc
Size: 5KB - Virtual size: 5KB