0c6a902bdf8d9f464f000ffc3110c220N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0c6a902bdf8d9f464f000ffc3110c220N.exe
Size

520KB
MD5

0c6a902bdf8d9f464f000ffc3110c220
SHA1

93d51b4be63cda8fb231d76b1ec53cf73aae7187
SHA256

19b0f54605e17750a7b28699aecfb539a51cfab26bc1e30f2c8ba58be6b3ad0c
SHA512

4ff8eb0b38ce5029a5a326dc43873c70e016a06f21ac974687b63ab623165d1e0d112ff9c56532011520062b371ec8e7ee52effd935229663ac9987d6ff61748
SSDEEP

12288:+OK3RPhGirCh8jeYiTNCbLJwPqM4w4Czoj80l/rMFsN3:+OKBICCq7iTNCbLJuVoI05Mw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6a902bdf8d9f464f000ffc3110c220N.exe

Files

0c6a902bdf8d9f464f000ffc3110c220N.exe
.dll windows:6 windows x86 arch:x86

d798808c543113bd53e96cda1bb41a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
IsValidCodePage
FreeEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetStdHandle
HeapSize
GetModuleHandleExW
ExitProcess
GetProcessHeap
IsDebuggerPresent
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
HeapAlloc
RtlUnwind
GetCPInfo
GetCurrentThreadId
GetLastError
DeleteCriticalSection
LeaveCriticalSection
DecodePointer
GetStringTypeW
GetCommandLineW
GlobalFree
ClearCommBreak
LoadLibraryExW
EnterCriticalSection
CreateNamedPipeA
QueryPerformanceCounter
TlsFree
FindFirstFileA
CreateFileW
CreateEventA
GetLocaleInfoW
ExpandEnvironmentStringsA
DeleteFileA
LocalFree
GetThreadTimes
FindNextFileA
GetOEMCP
GetFileType
CreateFileMappingA
GetLocalTime
SetLastError
RaiseException
MultiByteToWideChar
CreateProcessA
MulDiv
WideCharToMultiByte
GetLocaleInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetTickCount
HeapFree
OpenFileMappingA
TlsAlloc
GetACP
OpenProcess
GetEnvironmentStringsW
InitializeSListHead
GetUserDefaultLCID
EncodePointer

user32

SetKeyboardState
UnregisterClassA
CheckRadioButton
GetWindowTextLengthA
ShowCaret
SetScrollRange
GetCapture
GetSysColor
IsDlgButtonChecked
ValidateRgn
EndMenu
SetFocus
OffsetRect
GetDlgItem
EndDialog
RedrawWindow
ReleaseCapture
EndPaint
DeleteMenu
MessageBeep
GetDoubleClickTime
CreateIconIndirect
GetWindowTextA
SetScrollPos
DestroyCursor
CreatePopupMenu
EnableScrollBar
PostMessageA
SetCaretPos
CheckMenuItem
TranslateMDISysAccel
RegisterClassA
IsIconic
GetScrollInfo
DrawEdge
UnionRect
GetDlgItemTextA
DestroyWindow
DestroyAcceleratorTable
MapDialogRect
GetDC
DrawFocusRect
GetKeyboardLayout
CheckMenuRadioItem
MessageBoxA
GetWindowLongA
SystemParametersInfoW
ScrollWindow
GetDesktopWindow
CheckDlgButton
DestroyIcon
DrawFrameControl
SetScrollInfo

gdi32

GetCurrentPositionEx
GetDIBColorTable
CreateRectRgn
SetViewportExtEx
CloseEnhMetaFile
DeleteDC
GetRgnBox
GetNearestPaletteIndex
GetPixel
SetPolyFillMode
TextOutA
GetWindowOrgEx
Arc
CreateFontIndirectA
CopyEnhMetaFileA
GetRegionData
ExtCreateRegion
GetTextExtentPointW
GetCharABCWidthsW
SetStretchBltMode
GetCharWidth32A
IntersectClipRect
SetMapMode
MoveToEx
SetLayout
PatBlt
GetMetaFileBitsEx
GetDeviceCaps
SelectPalette
SetPaletteEntries
RoundRect
GetTextExtentPointA

advapi32

GetLengthSid
RegOpenKeyExW
SetSecurityDescriptorDacl
CopySid

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d798808c543113bd53e96cda1bb41a92

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 398KB - Virtual size: 397KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 19KB - Virtual size: 34KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 398KB - Virtual size: 397KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 19KB - Virtual size: 34KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 16KB - Virtual size: 15KB