0cbac737b2f124e59b27d690dc6993223d8ecc4e5b69c1a09444cedadb4f42a4

General

Target

0cbac737b2f124e59b27d690dc6993223d8ecc4e5b69c1a09444cedadb4f42a4
Size

36KB
MD5

35c737050fd19562d38b6bba222f85fd
SHA1

c7684920eea486344be8d6537a6148e964f2f197
SHA256

0cbac737b2f124e59b27d690dc6993223d8ecc4e5b69c1a09444cedadb4f42a4
SHA512

a61da19b16a596bac4fd05b53504c4ff5f63d16430bdb96e4537efca5945d40b244c7424ac0d38ce66ca5355fd76359d80cca75f7a393c7ec08218136eef83b2
SSDEEP

768:x7gztELArFJmcoausNjYWfDJTcngcMcVdG:x7Ut6Omd/4jZJUrVdG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cbac737b2f124e59b27d690dc6993223d8ecc4e5b69c1a09444cedadb4f42a4

Files

0cbac737b2f124e59b27d690dc6993223d8ecc4e5b69c1a09444cedadb4f42a4
.exe windows:4 windows x86 arch:x86

49ee3de62b5dc4dcf2edd4d3a2858849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReleaseMutex
GetLastError
CreateMutexA
GetProcAddress
GetModuleHandleA
GetUserDefaultLangID
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

siecadu8

scdlg_MessageBox
scdlg_SelectSlot
scdlg_InsertCard
scdlg_ChangePIN

msvcr80

vsprintf_s
strncpy_s
strcpy_s
_amsg_exit
__getmainargs
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
strchr
__iob_func
fprintf
memcpy
calloc
free
_cexit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49ee3de62b5dc4dcf2edd4d3a2858849

Headers

File Characteristics

Imports

kernel32

siecadu8

msvcr80

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 2KB