08cb30fdffb7872bd80efc4d1cb985ae

General

Target

08cb30fdffb7872bd80efc4d1cb985ae
Size

156KB
MD5

08cb30fdffb7872bd80efc4d1cb985ae
SHA1

1c79825fc209fc3bea5c645ecfc6ae352c545625
SHA256

f62b7de0b7067985718ebad3390e40e0fbe4b2ad4dd1fd37a9fe785e2f364bfa
SHA512

3fb456cdafffc175dd01540af26801e7bf82a9a2047de107d35c747c241de98880ab3f0d96caf3631785047fac5bb2775bc731a402f8d3c1eacac8bbee1c8f9a
SSDEEP

3072:WQ7lYec4CId+ErZYGDIZMaxukuftSzTSFWxNjA+7qgU:WylzBEODIGaxrmtSzvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08cb30fdffb7872bd80efc4d1cb985ae

Files

08cb30fdffb7872bd80efc4d1cb985ae
.exe windows:4 windows x86 arch:x86

de2ca12703a25cded9da97caa78f84c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleDC
CreateDIBSection
GdiFlush
SelectObject
DeleteObject
BitBlt
DeleteDC

wininet

InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetGetConnectedState
HttpOpenRequestW
HttpSendRequestA
InternetConnectW
InternetCloseHandle

shlwapi

PathAddBackslashW
PathAppendW
PathRemoveFileSpecW
PathRemoveBackslashW
PathRemoveArgsW
PathUnquoteSpacesW
PathFileExistsW

advapi32

RegCloseKey

user32

SetForegroundWindow
CopyRect
GetLastActivePopup
IsIconic
GetWindowRect
GetDC
GetClientRect
ShowWindow
ReleaseDC
GetSystemMetrics
SetRect
DrawIcon
TranslateMessage

msimg32

AlphaBlend

kernel32

CompareStringA
InitializeCriticalSection
GetModuleFileNameA
ClearCommBreak
GetSystemDefaultLangID
GetTickCount
ClearCommBreak
FreeLibrary
CloseHandle
QueryPerformanceCounter
GetLastError
GetWindowsDirectoryA
LoadLibraryA
EnumResourceNamesW
GetSystemDirectoryA
GetVersionExA
DeleteCriticalSection
GetModuleHandleA
GetCurrentProcessId
ExitProcess
GetSystemTimeAsFileTime
ExitProcess
GetCurrentThreadId
GetStartupInfoW
SetLastError
WaitForSingleObject
InterlockedExchange

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de2ca12703a25cded9da97caa78f84c0

Headers

File Characteristics

Imports

gdi32

wininet

shlwapi

advapi32

user32

msimg32

kernel32

shell32

Sections

.text Size: 117KB - Virtual size: 116KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 35KB - Virtual size: 34KB

.rscr Size: 512B - Virtual size: 336KB

.text
Size: 117KB - Virtual size: 116KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 35KB - Virtual size: 34KB

.rscr
Size: 512B - Virtual size: 336KB