0f48cac832b43addac06b3889e4dd074bc38cf9a2f5fec9fabbd16040051e8e4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f48cac832b43addac06b3889e4dd074bc38cf9a2f5fec9fabbd16040051e8e4N
Size

18KB
MD5

aedacdff24f5cad472f637bc99e40280
SHA1

5d027ab9579a6b9b660c09707acc55e94f450dcb
SHA256

0f48cac832b43addac06b3889e4dd074bc38cf9a2f5fec9fabbd16040051e8e4
SHA512

e5f76c96dd867660318d95038323d1acadf46228c0ce357b842513699c286524d0913dd5b7174dcb5a847ee9080cdd83793a34878429a8704fe2f8d297283b53
SSDEEP

384:krDKFb+tnPWjtLf8zvywBc0zVX+o0viOYC:QqatnPWjtLfQC0Budv7YC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f48cac832b43addac06b3889e4dd074bc38cf9a2f5fec9fabbd16040051e8e4N

Files

0f48cac832b43addac06b3889e4dd074bc38cf9a2f5fec9fabbd16040051e8e4N
.dll windows:4 windows x86 arch:x86

3da9cf94d9d003c0078ba254faf43d34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
CreateFileA
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
GetCPInfoExA
MultiByteToWideChar
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
LoadLibraryA
GetACP
GetProcAddress

user32

GetDC

wininet

HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

advapi32

ControlService
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle

msvcrt

memset
_except_handler3
strcpy
sprintf
strrchr
strlen
strcat
memcpy

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ