0c476028b277f7ab4911468103109d61f09755e505cf333caa64d0f8b5db7e55

General

Target

0c476028b277f7ab4911468103109d61f09755e505cf333caa64d0f8b5db7e55
Size

128KB
MD5

dad095a1171637ad25f8d6624940eff1
SHA1

4d6075f2f88bc07b67e16f7c8e721fdf7e67e4af
SHA256

0c476028b277f7ab4911468103109d61f09755e505cf333caa64d0f8b5db7e55
SHA512

171876cb651e3786ec9a8ceb92b6a3e32ac447cb00f0627ef19989c88fefabb86ea21d3a5a60c3af950c3911c4361d6d0eb74683c68f2011f1111d2b4cf5a10f
SSDEEP

1536:qU2W/EAU62fSTsAJ1oUk7yjh6fYncEB5Lw7HrOkjF642zgOITE0pTLWpzQQSmAPi:lRJpknCca5LwfOk56ZgOslQUqdo2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c476028b277f7ab4911468103109d61f09755e505cf333caa64d0f8b5db7e55

Files

0c476028b277f7ab4911468103109d61f09755e505cf333caa64d0f8b5db7e55
.dll windows:4 windows x86 arch:x86

6ffeb922ad7fbb8b3d5f3059bd117450

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleFileNameA
LoadLibraryA
GetProcAddress
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

std-2.0.1-vc5.0-mt

?insert@os_tree_aux@@SAX_NPAVos_tree_node@@11AAPAV2@2211@Z
?decrement@os_tree_aux@@SAXAAPAVos_tree_node@@PAV2@@Z
?os_throw_out_of_range@@YAXXZ
?increment@os_tree_aux@@SAXAAPAVos_tree_node@@PAV2@@Z
?uninit_nil@os_tree_aux@@SAXPAVos_tree_node@@@Z
?init_nil@os_tree_aux@@SAXPAVos_tree_node@@@Z
?os_throw_length_error@@YAXXZ

Exports

Exports

getCharacterInterface
init

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ffeb922ad7fbb8b3d5f3059bd117450

Headers

File Characteristics

Imports

kernel32

std-2.0.1-vc5.0-mt

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 81KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 15KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 84KB - Virtual size: 81KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 15KB

.reloc
Size: 12KB - Virtual size: 10KB