d8b9bc6a689e3d0cb5f63df62c9fc948e462c1f0b72ddfba8f7142e1ab26710a

General

Target

d8b9bc6a689e3d0cb5f63df62c9fc948e462c1f0b72ddfba8f7142e1ab26710a
Size

1.5MB
MD5

5868f684bf6a180b82fab624fa7308c7
SHA1

ebdd1f295271988c2227ad293d56718314bc9ca1
SHA256

d8b9bc6a689e3d0cb5f63df62c9fc948e462c1f0b72ddfba8f7142e1ab26710a
SHA512

9b3c8d0a9f7922fb670483668322f646306891269d3ef7a0e1c79b9f943fdef69506e51080990aec8d7364d3395122f8879d0bdb022ec54a323f5af00c03feb2
SSDEEP

24576:1gJSgWF0sTqsf3hKq8JHLfadh4JSC3gUH15Mn1u6I2QCtt2Us0w:1gh20mpf3FYLfad+4C3/1L6PQCttK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8b9bc6a689e3d0cb5f63df62c9fc948e462c1f0b72ddfba8f7142e1ab26710a

Files

d8b9bc6a689e3d0cb5f63df62c9fc948e462c1f0b72ddfba8f7142e1ab26710a
.exe windows x86

4fbfbf06524d7b5c54fb33c0e88b2919

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

MoveToEx

kernel32

CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetCurrentProcess
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
CreateFileMappingA
FlushInstructionCache
MapViewOfFile
VirtualFree
VirtualProtect
RtlMoveMemory

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CharLowerBuffA
CharNextA
CharUpperBuffA
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
DialogBoxParamA
GetWindow

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4fbfbf06524d7b5c54fb33c0e88b2919

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB