8b877b663b1d845084346e98ce15be23eb042572b7c9a02c58200bb50310d8af

Sharing

Copy URL

Twitter E-mail

General

Target

8b877b663b1d845084346e98ce15be23eb042572b7c9a02c58200bb50310d8af
Size

6.7MB
MD5

f78def66dca83cd88a646d51cf579115
SHA1

0e66a67e6a0ceba3dd9f0b64537f586086095118
SHA256

8b877b663b1d845084346e98ce15be23eb042572b7c9a02c58200bb50310d8af
SHA512

ddcf1d0044a26d19ec8140f83ab76143f34b0e0c4202a18271d5af19e77340b94796c7efe38e76fcfa117a6050fc48a8ba1295d32d6ba7d4b2c9e61a1c9283e8
SSDEEP

98304:3SwJfZf3ishTT8FbTxkA/B6bQfw8rkqqxJ/TwL4ZJMCb0kdnWkvjrl5ZGknykUnr:CKJbhYJ3/2QfP14ZZYG/B5ZXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b877b663b1d845084346e98ce15be23eb042572b7c9a02c58200bb50310d8af

Files

8b877b663b1d845084346e98ce15be23eb042572b7c9a02c58200bb50310d8af
.exe windows:6 windows x64

12a9e1e185f6f75f6deaddfd6755d477

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetVersionExA
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

WinHelpA

msimg32

AlphaBlend

shlwapi

PathFindFileNameA

uxtheme

OpenThemeData

urlmon

URLDownloadToFileA

gdiplus

GdipGetImagePaletteSize

oleacc

CreateStdAccessibleObject

imm32

ImmGetContext

winmm

PlaySoundA

gdi32

SetROP2

winspool.drv

DocumentPropertiesA

advapi32

RegDeleteValueA

shell32

DragQueryFileA

ole32

DoDragDrop

oleaut32

SysStringLen

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12a9e1e185f6f75f6deaddfd6755d477

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msimg32

shlwapi

uxtheme

urlmon

gdiplus

oleacc

imm32

winmm

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 500KB

.data Size: - Virtual size: 56KB

.pdata Size: - Virtual size: 79KB

_RDATA Size: - Virtual size: 252B

.vmp0 Size: - Virtual size: 3.1MB

.vmp1 Size: 6.4MB - Virtual size: 6.4MB

.reloc Size: 512B - Virtual size: 48B

.rsrc Size: 268KB - Virtual size: 267KB

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 500KB

.data
Size: - Virtual size: 56KB

.pdata
Size: - Virtual size: 79KB

_RDATA
Size: - Virtual size: 252B

.vmp0
Size: - Virtual size: 3.1MB

.vmp1
Size: 6.4MB - Virtual size: 6.4MB

.reloc
Size: 512B - Virtual size: 48B

.rsrc
Size: 268KB - Virtual size: 267KB