8f85b47f0016b3b83cbc4cec08991dab

General

Target

8f85b47f0016b3b83cbc4cec08991dab
Size

144KB
MD5

8f85b47f0016b3b83cbc4cec08991dab
SHA1

294800f18f77c4a09bd0a0a74b2c913dfb1f3ef7
SHA256

b28ab35fbce636cd04bc1efc651532578044c669ee1958d32b4cb51aa8089b27
SHA512

ddbe6b3fdc730abe9104fd2c18c2df31aac15b10b00757a7c82edf4218e181e02cdef12c5beb1555bfc4625e6bef7c9a481d7339a9c5822b8b52e38d6e20e38f
SSDEEP

3072:nUq1EM2qMXkgW2R5GFjSEqt0c3otHBJ1UczVCuCRueVLhiD+WC37lJDMa:Uqsq9IGtqCT9VFChy+W8TDMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f85b47f0016b3b83cbc4cec08991dab

Files

8f85b47f0016b3b83cbc4cec08991dab
.exe windows:5 windows x86 arch:x86

20502395b04e9d89e16a33da1dff47db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetVersion
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
ExitProcess
GetCurrentProcess
TerminateProcess
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
lstrlenA
CloseHandle
GetLastError
CreateProcessA
SearchPathA
Sleep
GetModuleHandleA
GetUserDefaultLCID

user32

DestroyMenu
GetMenuDefaultItem
CreatePopupMenu
SetCursor
LoadCursorA
LoadStringA
SendMessageTimeoutA
MessageBoxA
FindWindowA

ole32

OleInitialize
OleUninitialize

shell32

SHGetDesktopFolder

advapi32

RegCloseKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20502395b04e9d89e16a33da1dff47db

Headers

File Characteristics

Imports

kernel32

user32

ole32

shell32

advapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 112KB - Virtual size: 112KB