08cb0a71122bcd906b551bff908e2e3a

General

Target

08cb0a71122bcd906b551bff908e2e3a
Size

136KB
MD5

08cb0a71122bcd906b551bff908e2e3a
SHA1

277f0cf660efe2f3ee69b473ebcc168e67f3309a
SHA256

60fcaf0ede9ddd3b5b71b056e921b2a929384f04c2c49bf1a06b3daedb867146
SHA512

1df0d14fd455dde1fb4cf35eabb88e22fcd2a73cf26bb2c5b51b099ecc9e46fd5537f5fe59ebe1585f6e1cb68763ad75918be4578d9f360beb09d31dd2e2b654
SSDEEP

3072:AMru46nWIu364Y5ayOs1jhWct482OoGWyuF/SAiLjTwFHz:tru1nWIu364mayFjWcKty2ZFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08cb0a71122bcd906b551bff908e2e3a

Files

08cb0a71122bcd906b551bff908e2e3a
.exe windows:4 windows x86 arch:x86

3ea06f940953f2f6c441d3e86ff7ec4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetProcAddress
GetModuleHandleA
GetLastError
ExitProcess
LoadLibraryA
GetModuleFileNameA
GetTempPathA
MoveFileA
WriteFile
GetTickCount
GetCurrentProcessId
CreateFileA
SleepEx
CreateEventA
WaitForSingleObject
GetCurrentProcess
GetShortPathNameA
ExpandEnvironmentStringsA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
CopyFileA
GetCommandLineA
GetCurrentThreadId
CreateDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GetCurrentThread
LocalAlloc
InterlockedExchange
FreeLibrary
RaiseException

msvcrt

srand
__CxxFrameHandler
memcpy
strncmp
strrchr
strstr
strncpy
rand
_ftol
tolower
_callnewh
malloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_strrev
memmove
_except_handler3
memset
_itoa

user32

GetActiveWindow
FlashWindow

ws2_32

listen

Sections

.xext
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ea06f940953f2f6c441d3e86ff7ec4f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ws2_32

Sections

.xext Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 3KB

.xext
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 3KB