0c392b947a1654a249301adcbae2ca4b1de4bb67d6104a20666f5b0ee50c4ea7

General

Target

0c392b947a1654a249301adcbae2ca4b1de4bb67d6104a20666f5b0ee50c4ea7
Size

221KB
MD5

87abb5e7426b12b7a2f89ec5b61bed2a
SHA1

45137b8a27fce6911d0e8eeded28cabc413cc0ea
SHA256

0c392b947a1654a249301adcbae2ca4b1de4bb67d6104a20666f5b0ee50c4ea7
SHA512

a4083721f8f5562d32e7f304e133319c5db3cda488ccef559937b5f574a25588bfd9e8417b45ca5b6065b2c360876b2fb33dd33f75b03520e3abf4cfdead3576
SSDEEP

3072:pFrf0Qh3s8mEHfqGYoMxyXRbSA54fQrAYCmopQihpm0rICXBJp1cfeU7U:/fZhFm4FYH0iA7ihpmspI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c392b947a1654a249301adcbae2ca4b1de4bb67d6104a20666f5b0ee50c4ea7

Files

0c392b947a1654a249301adcbae2ca4b1de4bb67d6104a20666f5b0ee50c4ea7
.dll windows:6 windows x86 arch:x86

d097cc8bf8981b0c9dc8c184d9104784

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

iccvid.pdb

Imports

msvcrt

_initterm
_amsg_exit
_except_handler4_common
free
malloc
_XcptFilter
_vsnprintf
memcpy
_setjmp3
longjmp
memmove

user32

DialogBoxParamA
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadBitmapA
BeginPaint
GetDlgItem
GetWindowRect
ScreenToClient
EndPaint
GetDC
ReleaseDC
LoadStringA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
GetModuleFileNameA
MultiByteToWideChar
DisableThreadLibraryCalls
DebugBreak
LocalAlloc
GetPrivateProfileIntA
MulDiv
LocalFree

winmm

DefDriverProc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

gdi32

DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetSystemPaletteEntries

Exports

Exports

DriverProc

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d097cc8bf8981b0c9dc8c184d9104784

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

kernel32

winmm

version

gdi32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 142KB - Virtual size: 141KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 142KB - Virtual size: 141KB