8bd61c883e9ffc637c7dd0bf7ab93d6b

General

Target

8bd61c883e9ffc637c7dd0bf7ab93d6b
Size

696KB
MD5

8bd61c883e9ffc637c7dd0bf7ab93d6b
SHA1

fd2fcc0d26d4aff9adbed3b57befb2568222ff38
SHA256

60f4de6a343a174eebb2455834b4333103d0159b5a975f793e98b91bcc96594a
SHA512

e37e32b1bf6b6a63ec02855cf540d7c188b308c332efd63b82a32b2344b7d8d0fdd9a2eade329d7ac682a2ab4133dac19fbf2c1a5bdb2d6d6b37402a4628bd49
SSDEEP

12288:IsmFRVtoSeN6hocevUGQ8zRNXnf8HWpKKXNAh/gEHjE:IsgvEVcevrsiKmWh/g+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

8bd61c883e9ffc637c7dd0bf7ab93d6b

resource
8bd61c883e9ffc637c7dd0bf7ab93d6b

Files

8bd61c883e9ffc637c7dd0bf7ab93d6b
.exe windows:4 windows x86 arch:x86

78d8ce3d41db46da36eaecb05a52fe6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA
RasGetConnectStatusA

kernel32

IsBadWritePtr
HeapReAlloc
CreateFileA
HeapAlloc
QueryPerformanceCounter
HeapFree
SetTapeParameters
GetTickCount
VirtualFree
GetDateFormatA
OpenProcess
GetVolumeInformationA
Sleep
HeapCreate
CreateProcessA
CreateDirectoryA
GetStartupInfoA
VirtualAlloc
CopyFileA
ResetEvent
GetLocalTime
LockResource
GetSystemInfo
GetModuleHandleA
VirtualProtect
GetVersionExA
CloseHandle
GetSystemTime
DeleteFileA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
HeapDestroy
WriteFile
FlushFileBuffers
SetFilePointer
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
VirtualQuery
SetStdHandle
ReadFile
LoadLibraryA
GetACP
GetOEMCP
GetLocaleInfoW
SetEndOfFile

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78d8ce3d41db46da36eaecb05a52fe6b

Headers

File Characteristics

Imports

rasapi32

kernel32

Sections

.text Size: 224KB - Virtual size: 220KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 164KB

.rsrc Size: 440KB - Virtual size: 439KB

.text
Size: 224KB - Virtual size: 220KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 164KB

.rsrc
Size: 440KB - Virtual size: 439KB