08e04c0e9ae80557e1fffe96d5d3afcd

Sharing

Copy URL Twitter E-mail

General

Target

08e04c0e9ae80557e1fffe96d5d3afcd
Size

2.6MB
MD5

08e04c0e9ae80557e1fffe96d5d3afcd
SHA1

fb67017322786aab2753f305e9542c97b0e16aec
SHA256

b53d8c86e34135a3977e7e9c5847c988ecaaec200ae4880042c1c200d038e48e
SHA512

3e45da33ffe3d4403523ba6a163c7d333033b0aebcfaba3d8823e625580340d39d1fbc0bf31237732f24b0bedfc280d459ee8c3f52ba918fd965a79ab705750d
SSDEEP

49152:uovO7xhOygYvo1CEqaXPiMMK9T9AvFtMAlavuQUEAkD10UM:XG7xfgYvO3PiMX9TCvFtMAlamQUEbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08e04c0e9ae80557e1fffe96d5d3afcd

Files

08e04c0e9ae80557e1fffe96d5d3afcd
.exe windows:6 windows x86 arch:x86

3e4b8cd1860d16d8e4b563646c710d12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
terminate
_seh_filter_dll
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_register_onexit_function
exit
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_initialize_narrow_environment
abort
_cexit

api-ms-win-crt-string-l1-1-0

_wcsicmp
memset

kernel32

GetCurrentProcess
TerminateProcess
GetStartupInfoW
RaiseException
GetLastError
GetSystemInfo
SetUnhandledExceptionFilter
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryExA
FindResourceW
SizeofResource
LoadResource
LockResource
CreateFileW
WriteFile
CloseHandle
LocalAlloc
LocalFree
Sleep
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
VirtualProtect

advapi32

FreeSid
RegCreateKeyExW
RegDeleteValueW
RegSetKeySecurity
CloseServiceHandle
CreateProcessAsUserW
RegCloseKey
SetFileSecurityW
SetSecurityDescriptorDacl
ChangeServiceConfigW
ControlService
QueryServiceStatusEx
OpenServiceA
OpenSCManagerW
RegDeleteKeyW
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
RegSetValueExW
RegOpenKeyExW

ole32

CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SetErrorInfo
SysFreeString
SysAllocString
VariantCopy
VariantClear
CreateErrorInfo
VariantInit
GetErrorInfo
VariantChangeType

winmm

PlaySoundW

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-stdio-l1-1-0

fopen
fclose

api-ms-win-crt-environment-l1-1-0

_wgetenv

mscoree

_CorExeMain

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 914KB - Virtual size: 914KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e4b8cd1860d16d8e4b563646c710d12

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

advapi32

ole32

oleaut32

winmm

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

mscoree

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 914KB - Virtual size: 914KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 914KB - Virtual size: 914KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 2KB - Virtual size: 1KB