08dd6cf686db769cb6c88e30b71e9348

General

Target

08dd6cf686db769cb6c88e30b71e9348
Size

156KB
MD5

08dd6cf686db769cb6c88e30b71e9348
SHA1

b545ac1ced148113b5cfd00a05f0d72773b10e7b
SHA256

24c9ca7c67f6ea2e92e90c046799c5953f38f09f00b9766342d0c4643b527e06
SHA512

d3dab9038917bf9c36f6a6112833570867007afd52c3c0c7fac50a6b351ba9351f6ebde49c72f345e87cb8b85695526c8bd0d0c5309670e0eb1f04ae28d46c10
SSDEEP

3072:csn37nu2D15w+4g/YTNbmsVTIOOb8NeHj/cGFxvmjCXodUxuz8+:L37nvY+4g/YTdhIDb8NeoeZxAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08dd6cf686db769cb6c88e30b71e9348

Files

08dd6cf686db769cb6c88e30b71e9348
.exe windows:4 windows x86 arch:x86

cf8f98d5cc483ad6d661bc4c75eca616

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
IsBadHugeWritePtr
TerminateProcess
TerminateJobObject
GetThreadSelectorEntry
GetStartupInfoA
GetBinaryTypeA
GetCurrentProcessId
GetLocaleInfoA
GetOverlappedResult
GetExitCodeProcess
SizeofResource
EnumLanguageGroupLocalesA
GetModuleHandleA
FoldStringA
ReadFile
RemoveDirectoryW
GetConsoleCP
DefineDosDeviceA
FormatMessageA
LCMapStringA
MapViewOfFileEx
VirtualLock
GetModuleFileNameA
GlobalLock
GetFileAttributesExA

msvcrt

exit
__getmainargs
_XcptFilter
_controlfp
_adjust_fdiv
_exit
_initterm
__set_app_type
_except_handler3
__setusermatherr
_acmdln
__p__commode
__p__fmode

user32

MessageBeep
CreateAcceleratorTableA
keybd_event
GetMenu
DdeUnaccessData
AppendMenuW
SetMenuContextHelpId
SetClassLongW
ImpersonateDdeClientWindow
GetCaretBlinkTime
GetWindowModuleFileNameA
DdeInitializeA
CallWindowProcW
PeekMessageW
EnumPropsExA
SetDeskWallpaper
GetAltTabInfoW
DestroyMenu
DrawFocusRect
MapVirtualKeyExW
WINNLSGetIMEHotkey

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf8f98d5cc483ad6d661bc4c75eca616

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 13KB - Virtual size: 88KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 13KB - Virtual size: 88KB

.rsrc
Size: 8KB - Virtual size: 7KB