f8e3b36863c8309f5a0e232cde54c19f

Sharing

Copy URL Twitter E-mail

General

Target

f8e3b36863c8309f5a0e232cde54c19f
Size

463KB
MD5

f8e3b36863c8309f5a0e232cde54c19f
SHA1

fe4066e4f8fd671bb691e5efb1d259227252030e
SHA256

f004ff4fee4c66a0ab85496f50e7265cc188190fcea9da644bf04bb279355e6a
SHA512

4038ca2ab47ff1726ba7c452270540d127eb3e6f2e97f11acaf49578cc12a52a7f087c1123209c3942681a49bac64196788591c320ebae47b6b32d443f4a8981
SSDEEP

12288:DvOvgpxKhS5XjcFSIc5mCHhgymAJYlkneFw+XVDNxT:Dv9GioFSFHYAJ3Iw+J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8e3b36863c8309f5a0e232cde54c19f

Files

f8e3b36863c8309f5a0e232cde54c19f
.exe windows:4 windows x86 arch:x86

b04b07d44f371ed93c8d31cf6e8b2ae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
GetStartupInfoA
GetPrivateProfileIntW
GetStartupInfoW
GetFileType
EnumCalendarInfoExW
HeapAlloc
UnhandledExceptionFilter
SetHandleCount
IsValidCodePage
Sleep
GetLogicalDrives
SetVolumeLabelA
EnterCriticalSection
SetConsoleCtrlHandler
SetEnvironmentVariableA
CompareStringW
GetLocaleInfoW
GetModuleHandleW
LocalCompact
LeaveCriticalSection
FreeLibrary
GetOEMCP
GetACP
WriteConsoleOutputAttribute
GetStringTypeW
SetUnhandledExceptionFilter
GetLocaleInfoA
GetProcAddress
DeleteFileW
GetLastError
TlsGetValue
GlobalFindAtomW
FreeEnvironmentStringsW
GetCurrencyFormatW
GetTimeFormatA
VirtualQuery
IsDebuggerPresent
TlsFree
LCMapStringA
DeleteCriticalSection
GetUserDefaultLCID
SetLastError
GetEnvironmentStringsW
HeapReAlloc
InterlockedIncrement
ExitProcess
WriteFileEx
MapViewOfFile
VirtualAlloc
TlsSetValue
QueryPerformanceCounter
GetCurrentProcess
HeapSize
GetModuleHandleA
GetCurrentThread
HeapCreate
HeapDestroy
GetCurrentThreadId
LCMapStringW
WideCharToMultiByte
FreeEnvironmentStringsA
GetDateFormatA
GetCurrentProcessId
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
EnumSystemLocalesA
FindResourceExW
GetTickCount
GetStringTypeA
GetConsoleTitleW
GetCommandLineA
MultiByteToWideChar
IsValidLocale
RtlUnwind
GetCPInfo
GetSystemTimeAsFileTime
InterlockedExchange
InterlockedDecrement
GetProfileIntA
RtlZeroMemory
GetEnvironmentStrings
WriteFile
GetStdHandle
GetTimeZoneInformation
HeapFree
TerminateProcess
LoadLibraryA
SetConsoleTitleA
TlsAlloc
VirtualFree

comdlg32

ChooseColorW
GetSaveFileNameA
ChooseFontA
GetOpenFileNameA
FindTextA
PageSetupDlgW
ReplaceTextW
ReplaceTextA
GetFileTitleW
PrintDlgW
GetFileTitleA

gdi32

GetKerningPairs
GdiPlayJournal
GetClipBox
SetTextColor
EnumFontFamiliesExA
CreateICA
SetStretchBltMode
StrokeAndFillPath
PolyDraw
DeleteColorSpace
PlgBlt
GetGraphicsMode
GetWorldTransform
FillPath
ColorMatchToTarget
GetPolyFillMode
SetWinMetaFileBits
SetBrushOrgEx
WidenPath
GetLogColorSpaceA
GetWindowExtEx
EqualRgn
GetGlyphOutline

wininet

InternetQueryDataAvailable
InternetOpenA
InternetTimeToSystemTimeW
HttpSendRequestA
FtpFindFirstFileA
GopherGetAttributeA

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b04b07d44f371ed93c8d31cf6e8b2ae8

Headers

File Characteristics

Imports

kernel32

comdlg32

gdi32

wininet

Sections

.text Size: 139KB - Virtual size: 139KB

.data Size: 312KB - Virtual size: 317KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 139KB - Virtual size: 139KB

.data
Size: 312KB - Virtual size: 317KB

.rsrc
Size: 10KB - Virtual size: 9KB