0ebda06c94d996b5ec172636bea2a469b0fab78e2b169154a5b202ff6e978725 | Triage

Sharing

General

Target

0ebda06c94d996b5ec172636bea2a469b0fab78e2b169154a5b202ff6e978725
Size

2.3MB
MD5

363c673239ded8e3d50c74f386d518e2
SHA1

325f455b1d2f640d06a481a875d47d79d90976be
SHA256

0ebda06c94d996b5ec172636bea2a469b0fab78e2b169154a5b202ff6e978725
SHA512

62ce9aa074b92d5d0ada2e62924b6663e58a7a22a908b5945ca44785b084eeea7e292571db24f90325fd012b224c441dcd313aef91f66e7b9e89e95eb84c4cf5
SSDEEP

49152:9VoblzYCva7P8Sv7Nlc1fMUNrCr6NZqsmL4y2NB5BMjXyk:gJ9S7FNq1kUhlUSnMjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ebda06c94d996b5ec172636bea2a469b0fab78e2b169154a5b202ff6e978725

Files

0ebda06c94d996b5ec172636bea2a469b0fab78e2b169154a5b202ff6e978725
.dll windows:5 windows x86 arch:x86

d8fb90e2738bf12ac2a1961597a39012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetBoundsRect
CancelDC

kernel32

GetSystemTimeAsFileTime
GetStdHandle
LoadLibraryExW
OutputDebugStringA
GetModuleFileNameW
GetBinaryTypeW

oleaut32

VarBoolFromR4

Exports

Exports

HsladeyeReeme

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt1
Size: 4KB - Virtual size: 67B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ