0cf5df0c5317f7b92575d7263beae4b0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0cf5df0c5317f7b92575d7263beae4b0N.exe
Size

180KB
MD5

0cf5df0c5317f7b92575d7263beae4b0
SHA1

b4bc89882c12dd4d25e0780018376b1788d50d79
SHA256

75d9e28ead53191d8c01696bd0b938a82e22d92adcca41975b6173d34a5d1151
SHA512

7b4d2c41c211db789ca3e3ba982eca8779c77b67d3a56cb73dd4b9730b845489eed4d83523d8cdbe5cb50410629dd94214f6696d46620d82331a2f77f7ef0232
SSDEEP

3072:UrrStVkErij4sCBQGCbflIRdI8WoPqxATbdFxmuio40ek2a98WjeV8Hbgrz3I:Nb0M0bti+kdauioQJa9Hjc87grz3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf5df0c5317f7b92575d7263beae4b0N.exe

Files

0cf5df0c5317f7b92575d7263beae4b0N.exe
.exe windows:4 windows x86 arch:x86

235d1d8f8fec365ca43b62c9fa6dd21b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetVersionExW
GetLastError
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
GetEnvironmentStringsW
GetEnvironmentStrings
GetOEMCP
GetACP
SetEnvironmentVariableA
GetDriveTypeA
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
HeapSize
GetModuleHandleA
GetFullPathNameW
GetCurrentDirectoryA
FlushFileBuffers
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
IsBadWritePtr
VirtualAlloc
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetModuleFileNameA
SetFilePointer
GetVersionExA
CloseHandle
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetCurrentDirectoryW
LoadLibraryA
ReadFile

winspool.drv

EnumPortsW
ConfigurePortW
OpenPrinterW
ClosePrinter

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

235d1d8f8fec365ca43b62c9fa6dd21b

Headers

File Characteristics

Imports

version

kernel32

winspool.drv

advapi32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 76KB - Virtual size: 76KB