2c8adad15ca878cf4a0251c0a077bb4e

Sharing

Copy URL Twitter E-mail

General

Target

2c8adad15ca878cf4a0251c0a077bb4e
Size

132KB
MD5

2c8adad15ca878cf4a0251c0a077bb4e
SHA1

0fc2eae60797948311d9b9b24dd43cf600cecbeb
SHA256

73f5a581290cc9ce6897c6df27f2862b0153fbb6b0847afcb826bcb4a79cd100
SHA512

23a89dec03b7aeac20202bc1896a5032689b4540929cf81d5d81200d7e2049e420dab6c271dde0c2cb982d8e7d397da92ac878d548bfa8054ae67886a9b6e392
SSDEEP

1536:BzHfUGzNiunKsRb7sj05rLreJA4j0xP0ciQ38a6tFcyx0lbfNcTS0ks:h/hb427iQ38a6tFilDN6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8adad15ca878cf4a0251c0a077bb4e

Files

2c8adad15ca878cf4a0251c0a077bb4e
.exe windows:4 windows x86 arch:x86

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

shell32

SHGetFolderPathW

user32

MessageBoxW

advapi32

RegisterServiceCtrlHandlerW
DeleteService
ControlService
OpenServiceW
CloseServiceHandle
StartServiceW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
StartServiceCtrlDispatcherW
SetServiceStatus
OpenSCManagerW
CreateServiceW

wininet

InternetOpenW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetConnectW

kernel32

WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
GetACP
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
WriteFile
GetExitCodeProcess
TerminateProcess
CreateDirectoryW
GetLastError
SetFilePointer
WideCharToMultiByte
FlushFileBuffers
CreateFileW
CloseHandle
CreatePipe
GetEnvironmentVariableW
CreateProcessW
PeekNamedPipe
ReadFile
WaitForSingleObject
SetEndOfFile
Sleep
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
RaiseException
GetTimeZoneInformation
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

Imports

shlwapi

shell32

user32

advapi32

wininet

kernel32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 44KB - Virtual size: 60KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 44KB - Virtual size: 60KB