8e4913c6214f61804cc2cb3684d2324e

General

Target

8e4913c6214f61804cc2cb3684d2324e
Size

148KB
MD5

8e4913c6214f61804cc2cb3684d2324e
SHA1

7c842bea6b93ed12fea359e73bba2631d0a09942
SHA256

2a213fcc526ed0c6c52dd107e9fd10581f36ce0fcb586d6723d26475a0a6d161
SHA512

86e768c365da23ac81233311c14231f958fe6d704ef6bedbdf8f7d9f33cb14b677c1042f29084b61df3b6b67327f4c56686ca2cfd42049edc01fb41d9aa53e76
SSDEEP

3072:PqfAopZUtUVJc6OlQGp2MHHQ/rRvpn4diERpP1GC+Tt1:PwgtUMyGXiJpn4dR7NaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e4913c6214f61804cc2cb3684d2324e

Files

8e4913c6214f61804cc2cb3684d2324e
.exe windows:5 windows x86 arch:x86

b777e09e5bd91114cbfc545648f8f4f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

kernel32

lstrcpyA
GetFileAttributesA
CopyFileA
GetDriveTypeA
lstrcatA
MultiByteToWideChar
CreateDirectoryA
SetFileAttributesA
GetWindowsDirectoryA
GetLastError
GetModuleFileNameA
GlobalMemoryStatus
lstrcmpiA
ExitProcess
GetStartupInfoA
LoadLibraryA
lstrlenA
GetModuleHandleA
GetCommandLineA
LocalFree
lstrcpynA
LocalAlloc
IsDBCSLeadByte
FreeLibrary
CloseHandle
CreateFileA
SetCurrentDirectoryA
WriteFile
SetFilePointer
lstrcmpA
ReadFile
GetFileSize
GetSystemDirectoryA
SetErrorMode
GetProcAddress
GetVersionExA
ExpandEnvironmentStringsA
FindFirstFileA
GetPrivateProfileStringA
FindClose

user32

wsprintfA
CharPrevA
CharUpperA
MessageBoxA
CharNextA
LoadStringA
CharLowerA

shell32

ord179
SHChangeNotify
SHFileOperationA

ole32

OleUninitialize
CoCreateInstance
OleInitialize

advpack

GetVersionFromFile
RegRestoreAll
DelNode
ExecuteCab
RunSetupCommand

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b777e09e5bd91114cbfc545648f8f4f6

Headers

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

advpack

version

Sections

.text Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 576B

.rsrc Size: 116KB - Virtual size: 116KB

.text
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 576B

.rsrc
Size: 116KB - Virtual size: 116KB