2be8f5ab983cf7c52df88786eaf56879

Sharing

Copy URL

Twitter E-mail

General

Target

2be8f5ab983cf7c52df88786eaf56879
Size

118KB
MD5

2be8f5ab983cf7c52df88786eaf56879
SHA1

2ccc3cf1b144af92c7dbfe9f8669a8705f321d9f
SHA256

9a91b69d9774ec0c40e179e2424101d25d80b1821650f2896d83b32f3dae2790
SHA512

995eea14346b114233f02123ebe5b8d46608c518764949582294e620a5f5cfaa6d6a87f6efd184e9bd7bae56fe3d3007dbbf222024a186419ec35f0d11878bec
SSDEEP

1536:tO4ceSOeby2OS3y3TW4qJ/dsOVWBTfV/UlzidOb:jSOeu2OSijNqJ/d9WVfB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be8f5ab983cf7c52df88786eaf56879

Files

2be8f5ab983cf7c52df88786eaf56879
.exe windows:4 windows x86 arch:x86

8cca8667b8fc5a5c65688908d9f9f0a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FormatMessageA
FreeLibrary
GetACP
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
ScrollConsoleScreenBufferA
SetConsoleCursorPosition
SetConsoleOutputCP
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerA
CharLowerBuffA
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharUpperBuffW
GetSystemMetrics
MessageBoxA
SetActiveWindow

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 600B - Virtual size: 600B

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 319B - Virtual size: 319B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

8cca8667b8fc5a5c65688908d9f9f0a9

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 10KB - Virtual size: 10KB

.bss Size: - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 2KB

.stab Size: 600B - Virtual size: 600B

.stabstr Size: 319B - Virtual size: 319B

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 10KB - Virtual size: 10KB

.bss
Size: - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 2KB

.stab
Size: 600B - Virtual size: 600B

.stabstr
Size: 319B - Virtual size: 319B