01186f88ee85d191ea0888e3b977e4ba34b3bdaf953a27fd0ceb0bdd4ee56030

Sharing

Copy URL Twitter E-mail

General

Target

01186f88ee85d191ea0888e3b977e4ba34b3bdaf953a27fd0ceb0bdd4ee56030
Size

24KB
MD5

0a07719c5498a43a36163667d102eda3
SHA1

300f9e96c27e2138bf297890c3cfa219f0fbe5dc
SHA256

01186f88ee85d191ea0888e3b977e4ba34b3bdaf953a27fd0ceb0bdd4ee56030
SHA512

e7135547237b5c7079b3c489007e3f79662fcf44fc65263af4cd94c34f4a98a71992987d6a5a9c01324a3d6e3849acc55e6a22b233545efdeecda39c533556dc
SSDEEP

384:D48C1WV9Sn0xLyQ5n06HLtgHOhyx0HqyfsJ8RGMZGV8YdaKVNlkL:1SOBxLymjHBkOhyx0flGZdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01186f88ee85d191ea0888e3b977e4ba34b3bdaf953a27fd0ceb0bdd4ee56030

Files

01186f88ee85d191ea0888e3b977e4ba34b3bdaf953a27fd0ceb0bdd4ee56030
.dll windows:1 windows x86 arch:x86

f3bb038636693b690aa898454aee405f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

cw3220mt

__free_heaps
___debuggerDisableTerminateCallback
_strlen
__startup
__startupd
_abort
_strrchr
_strnicmp
_strchr
_strcat
_flushall
_sprintf
@$bdele$qpv
@$bdla$qpv
@$bnew$qui
@$bnwa$qui
@_CatchCleanup$qv
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
@string@$bdtr$qv
@string@compare$xqrx6string
@xmsg@$bctr$qrx4xmsg
@xmsg@$bdtr$qv
__ErrorExit
__ErrorMessage
__ExceptionHandler
__Return_unwind

kernel32

GetVersion
GetProcAddress
GetModuleHandleA

aciscc32

@TSCCore@PutStr$qqspxct1i
@TSCCore@PutRequest$qqspxct1t1t1
@TSCCore@GetNextField$qqspx10TACI_FIELDus
@TSCCore@$bctr$qqspvp11HINSTANCE__pxcsppqqsp7TSCCorepxc$vppqqsp7TSCCorepx10TACI_FIELDt2xul$px10TACI_FIELDt5t5ppqqsp7TSCCorepxct2$v
@TSCCore@IsPagePrintable$qqss
SkipWS
DelTWS
@TSCCore@GetStr$qqspxc
@TSCCore@$bdtr$qv

user32

MessageBoxA

Exports

Exports

ASC_DestroySCL
ASC_InitializeSCL
__DebuggerHookData

Sections

CODE
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3bb038636693b690aa898454aee405f

Headers

File Characteristics

Imports

cw3220mt

kernel32

aciscc32

user32

Exports

Exports

Sections

CODE Size: 9KB - Virtual size: 12KB

DATA Size: 5KB - Virtual size: 8KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

CODE
Size: 9KB - Virtual size: 12KB

DATA
Size: 5KB - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB