c0af043827809e55fc268b7fefd69dc6

General

Target

c0af043827809e55fc268b7fefd69dc6
Size

22KB
MD5

c0af043827809e55fc268b7fefd69dc6
SHA1

53f6cb92c24158d202760d4fe1c4d1a0eb18c5d5
SHA256

3ffadb7209e13dece3a70539d16f71439e37ee040523d044e4820adc4095b2b7
SHA512

746d8c4c7f6150e7f7e7991579c6dcb11106524a70d6961bfeb0d36fd066514e9c7e0f7ac047da898edd8d9a3d7559a5aa7f7d9960065f8239d9616db587a9a9
SSDEEP

384:eUcF+83n5g1phfGaj4sUUYGGtYw+kgG4O9Gucw21OhcXZ1MEtt1g:a7gXhLj4wGH4EGu/jIZ1jzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0af043827809e55fc268b7fefd69dc6

Files

c0af043827809e55fc268b7fefd69dc6
.dll windows:4 windows x86 arch:x86

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFileTime
GetFileTime
GetProcAddress
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcatA
Sleep
CreateThread
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetFileSize
CreateFileA
MultiByteToWideChar
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
WriteFile
GetTickCount
ReadFile
CloseHandle

user32

RegisterClassExA
LoadCursorA
UnregisterClassA
MessageBoxA
GetKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

msvcrt

strrchr
_except_handler3
strcat
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
memset
strcpy
atoi

imm32

ImmIsIME

Exports

Exports

CandWndProc
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc
pfjieaoidjglkajd

Sections

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

imm32

Exports

Exports

Sections

.bss Size: - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 1024B - Virtual size: 1010B

.bss
Size: - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 1024B - Virtual size: 1010B