8f6a33e009b0b24022a40b7c8aa3fd91a6de4464df7f5743ae7aa97b2c310beb

Sharing

Copy URL Twitter E-mail

General

Target

8f6a33e009b0b24022a40b7c8aa3fd91a6de4464df7f5743ae7aa97b2c310beb
Size

1.7MB
MD5

e35a1a2871e89f46d72c0f14f21b8abb
SHA1

c7f08281c3237d1a82c850a148ecf8791958aa81
SHA256

8f6a33e009b0b24022a40b7c8aa3fd91a6de4464df7f5743ae7aa97b2c310beb
SHA512

b71f4ff5eb6a559d761abab4d3048b50954116bd325fe399a9a5a9a0d53c0a82cabb61a452ca71302ae55e422050a4ca246f61d7d681c3dc98d2b785d701e4ee
SSDEEP

49152:z59pxHeMtbRo/JUHyErBqk8ccyem/fA/x5fOTQs7Dg6s:z59pZeMBWUHyOBq7cn1fA/x5+QkM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f6a33e009b0b24022a40b7c8aa3fd91a6de4464df7f5743ae7aa97b2c310beb

Files

8f6a33e009b0b24022a40b7c8aa3fd91a6de4464df7f5743ae7aa97b2c310beb
.exe windows x86

a16a37a92436738cd075d3554edc8b69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MoveWindow

gdi32

GetTextFaceA

advapi32

RegOpenKeyA

shell32

ShellExecuteA

ole32

CoUninitialize

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

bugslayerutil

GetFirstStackTraceString

d3d8

Direct3DCreate8

ddraw

DirectDrawCreateEx

mfc42

ord5710

msvcrt

_adjust_fdiv

soundlib

?ReleaseTrash@C3DSoundManager@@QAEHXZ

uonline

ord3

dinput8

DirectInput8Create

imm32

ImmGetConversionStatus

version

VerQueryValueA

winmm

timeGetTime

ws2_32

gethostbyname

Sections

.vtext
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata1
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hs_data
Size: - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null1
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vrdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext2
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata2
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext3
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Prmain
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Prmain0
Size: - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Prmain1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a16a37a92436738cd075d3554edc8b69

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcp60

bugslayerutil

d3d8

ddraw

mfc42

msvcrt

soundlib

uonline

dinput8

imm32

version

winmm

ws2_32

Sections

.vtext Size: - Virtual size: 1.8MB

.vdata1 Size: - Virtual size: 168KB

.hs_data Size: - Virtual size: 764KB

.null1 Size: - Virtual size: 4KB

.vrdata Size: - Virtual size: 4KB

.null2 Size: - Virtual size: 4KB

.vtext2 Size: - Virtual size: 120KB

.vdata2 Size: - Virtual size: 124KB

.vtext3 Size: - Virtual size: 2KB

.Prmain Size: - Virtual size: 16KB

.Prmain0 Size: - Virtual size: 645KB

.Prmain1 Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 8KB - Virtual size: 8KB

.vtext
Size: - Virtual size: 1.8MB

.vdata1
Size: - Virtual size: 168KB

.hs_data
Size: - Virtual size: 764KB

.null1
Size: - Virtual size: 4KB

.vrdata
Size: - Virtual size: 4KB

.null2
Size: - Virtual size: 4KB

.vtext2
Size: - Virtual size: 120KB

.vdata2
Size: - Virtual size: 124KB

.vtext3
Size: - Virtual size: 2KB

.Prmain
Size: - Virtual size: 16KB

.Prmain0
Size: - Virtual size: 645KB

.Prmain1
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 8KB - Virtual size: 8KB