8b34c73ba503e374a13554b3a20487b81a7a840d36cc6fea0bf7025cfa31f803

General

Target

8b34c73ba503e374a13554b3a20487b81a7a840d36cc6fea0bf7025cfa31f803
Size

36KB
MD5

c813b9f283a6081da79c5d6452fb1d5e
SHA1

209ae0075561f85567726a5e334a60b81bfde10b
SHA256

8b34c73ba503e374a13554b3a20487b81a7a840d36cc6fea0bf7025cfa31f803
SHA512

de0cd701c2918302e1cf6ea7af374c3338c3908391a1ac204517398c6c587840619677b283692af49d0d6faaec05182c6e32c5ebfdb176e66b66287ab912cc73
SSDEEP

384:jDgQW6dcJwmlOexgpyyVl8Q9woIldD4eGqA+odDjQALyFkj7yFvIbrh6o+5Tp:HgQj6KHyMtJaodHGkjQQfh6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b34c73ba503e374a13554b3a20487b81a7a840d36cc6fea0bf7025cfa31f803

Files

8b34c73ba503e374a13554b3a20487b81a7a840d36cc6fea0bf7025cfa31f803
.exe windows x86

3ab52dee43345c0838c33867adcdbc27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
FlushFileBuffers
SetStdHandle
GetLastError
CloseHandle
SetFilePointer
lstrlenA
GetSystemDirectoryA
LoadLibraryExA
GlobalAlloc
LocalLock
GlobalUnlock
LocalFree
lstrcpyA
CreateFileA
DeviceIoControl
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

BeginPaint
GetClientRect
DrawTextA
EndPaint
DefWindowProcA
CreateWindowExA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
PostQuitMessage
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterDeviceNotificationA
UpdateWindow

shell32

ShellExecuteA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ab52dee43345c0838c33867adcdbc27

Headers

File Characteristics

Imports

kernel32

user32

shell32

advapi32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 2KB