0dab5a783602e4844fb87ecf34d53432bb087bd8bc2c2f84506f653fcab67094

General

Target

0dab5a783602e4844fb87ecf34d53432bb087bd8bc2c2f84506f653fcab67094
Size

9KB
MD5

5001c59dd2b6d5fe0d1a6c1365f3f2c6
SHA1

721b31342e8ffcfbab918c7ece2498cb28b5e9cc
SHA256

0dab5a783602e4844fb87ecf34d53432bb087bd8bc2c2f84506f653fcab67094
SHA512

3cf90500cd9516eeb373c31ac57c315c15a9f515a0a25f06d34c7b0e92ee82b7e7bcff1a5a136f23f9658573020eadf39c8aad17948f4a34e240d4307334d601
SSDEEP

192:kS26SEZE/dhTgDJE8VMNFkPWJreHW6hh4j17R:kbZID9VLPWJreHW6hh4J7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dab5a783602e4844fb87ecf34d53432bb087bd8bc2c2f84506f653fcab67094

Files

0dab5a783602e4844fb87ecf34d53432bb087bd8bc2c2f84506f653fcab67094
.exe windows:6 windows x86 arch:x86

18838604d10c79e55eca2054b627560b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winhstb.pdb

Imports

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

?terminate@@YAXXZ
??3@YAXPAX@Z
__getmainargs
_cexit
_exit
_controlfp
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

18838604d10c79e55eca2054b627560b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

ole32

oleaut32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 888B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 32KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 888B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 32KB