08c85cbe6b94eb406e2b17a3d765fe040ce0cc243e2a2586fcff88fd1eb0a03f

Sharing

Copy URL

Twitter E-mail

General

Target

08c85cbe6b94eb406e2b17a3d765fe040ce0cc243e2a2586fcff88fd1eb0a03f
Size

2.1MB
MD5

0436ae2b310def6a1c42a82b48f442dd
SHA1

82a43a1cbf97cbb69f1c04764f268861d4b027b9
SHA256

08c85cbe6b94eb406e2b17a3d765fe040ce0cc243e2a2586fcff88fd1eb0a03f
SHA512

7eb2a6a52c1fe8f36d3fd638b971713fa7f478f91bd1356f71191381224dccc9b841eb71b5ecf58efdfa7d866402a783b2a5423b11ca892a5bd2b264369a96e5
SSDEEP

49152:fhjVB+QLX8mEqvNoAw1fBC/tcQ4Sk1lYJ7Mbz3lSzRwJj1E:oVm/Fokt1NZ7ko9Aj1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08c85cbe6b94eb406e2b17a3d765fe040ce0cc243e2a2586fcff88fd1eb0a03f

Files

08c85cbe6b94eb406e2b17a3d765fe040ce0cc243e2a2586fcff88fd1eb0a03f
.dll windows x86

7474739e9875076a9d190348183e1bc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rasapi32

RasHangUpA

winmm

midiOutReset

ws2_32

recv

kernel32

UnlockFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

InvalidateRect

gdi32

SetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

AdjustTokenPrivileges

shell32

DragAcceptFiles

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_DragMove

wininet

HttpOpenRequestA

comdlg32

GetFileTitleA

Exports

Exports

Hello

Sections

.text
Size: - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 887KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp2
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7474739e9875076a9d190348183e1bc7

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 960KB

.rdata Size: - Virtual size: 540KB

.data Size: - Virtual size: 300KB

.vmp0 Size: - Virtual size: 24KB

.reloc Size: - Virtual size: 108KB

.sedata Size: - Virtual size: 616KB

.idata Size: - Virtual size: 12KB

.vmp1 Size: - Virtual size: 887KB

.vmp2 Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 4KB - Virtual size: 120B

.rsrc Size: 8KB - Virtual size: 22KB

.text
Size: - Virtual size: 960KB

.rdata
Size: - Virtual size: 540KB

.data
Size: - Virtual size: 300KB

.vmp0
Size: - Virtual size: 24KB

.reloc
Size: - Virtual size: 108KB

.sedata
Size: - Virtual size: 616KB

.idata
Size: - Virtual size: 12KB

.vmp1
Size: - Virtual size: 887KB

.vmp2
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 4KB - Virtual size: 120B

.rsrc
Size: 8KB - Virtual size: 22KB