abc0756039a6df22c1b069d2904ce96f

General

Target

abc0756039a6df22c1b069d2904ce96f
Size

295KB
MD5

abc0756039a6df22c1b069d2904ce96f
SHA1

55baef0d9f1928d372c46f704975d752eed82eed
SHA256

25c8ff00d19ed7547285a48460ef257dc74aeeca0f6f19ef0eee88560b760ec3
SHA512

5c48f76c5ba9f13ff17b27f1b80db1fe6df834d2ed665827180039d3155df976cb53e2b7704d52f75caca7846c99b8cb1ca07ebcb711ac7942dccc08878f99b3
SSDEEP

6144:8M96yT2+nElEe06PEg9FoZbgw/K5tuI1mgqUxN:WS2+nVzsEMoZbgrj1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc0756039a6df22c1b069d2904ce96f

Files

abc0756039a6df22c1b069d2904ce96f
.exe windows:4 windows x86 arch:x86

d085fc617e251c22e821f828d992a605

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\final\Often\up\brought.pdb

Imports

msdmo

MoCreateMediaType
MoFreeMediaType
MoInitMediaType
DMOGetTypes
DMORegister
DMOUnregister

kernel32

GetModuleFileNameW
GetOEMCP
GetACP
SetStdHandle
SetFilePointer
CloseHandle
GetSystemInfo
GetWindowsDirectoryW
WritePrivateProfileStringW
VirtualProtect
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoW
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
GetLocaleInfoA
GetCPInfo

Exports

Exports

thoughdog

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d085fc617e251c22e821f828d992a605

Headers

File Characteristics

PDB Paths

Imports

msdmo

kernel32

Exports

Exports

Sections

.text Size: 162KB - Virtual size: 162KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 74KB - Virtual size: 372KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 162KB - Virtual size: 162KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 74KB - Virtual size: 372KB

.rsrc
Size: 1KB - Virtual size: 1KB