2c8df7bc2686d20a083e4d036a181dde

Sharing

Copy URL Twitter E-mail

General

Target

2c8df7bc2686d20a083e4d036a181dde
Size

214KB
MD5

2c8df7bc2686d20a083e4d036a181dde
SHA1

bf1888779206621b62044e8a5e6c7f3a73e0fc58
SHA256

59bd1b9e6e8646d396024e994f655a782172a39bac1a6378cf5e4cfb507e929d
SHA512

fffc6efe278993b43bf10557c22c10d404ac59c1f547b31a0bea345451d3a533c0892fbe494897cd348aa9b99d186cf006843f3894f4d8332ccf507d95f4193b
SSDEEP

3072:Kiv7hQFF7mgOwfgpwxWtgoE4Funtswz8DA7P6VVqejiV/8pjccTTnx/FN:vv9QFpmgGiOOn+wOA7gqeiV/44Uxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c8df7bc2686d20a083e4d036a181dde

Files

2c8df7bc2686d20a083e4d036a181dde
.exe windows:4 windows x86 arch:x86

7b4075d27700e5508750edc6cdc78137

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExW
RemoveDirectoryW
GetOEMCP
ConnectNamedPipe
CompareStringA
FindAtomW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetProcAddress
GetUserDefaultLangID
LoadLibraryA
EnumCalendarInfoW
GetCurrentDirectoryA
OpenProcess
SleepEx
IsValidLocale
GetEnvironmentVariableA
EnumCalendarInfoA
EnumTimeFormatsW
GetACP
GetExpandedNameA
GetCPInfo
ExpandEnvironmentStringsW
CreateNamedPipeW
GlobalFindAtomA
GetExitCodeThread
GetCurrentProcess
BeginUpdateResourceA
MoveFileW
CreateSemaphoreA
BeginUpdateResourceW
GetFullPathNameA
GetDateFormatW
CreateMailslotA
lstrcpyA
CreateNamedPipeA
GetExpandedNameW
GetTempFileNameW
ReplaceFileW
GetCurrentThread
lstrcpy
SetCurrentDirectoryW
GetSystemDirectoryW

user32

SendDlgItemMessageW
IsChild
CopyRect
EnableMenuItem
CreateDialogIndirectParamW
GetClassInfoA
CreateDesktopW
EnumWindows
GetDesktopWindow
SetWindowLongW
RemoveMenu
ShowCaret
SetMenu
LoadMenuW
DestroyWindow
CheckMenuRadioItem
CreateWindowExW
wsprintfA
ArrangeIconicWindows
EnumClipboardFormats
PostQuitMessage
IsWindowEnabled
LoadMenuIndirectA
BringWindowToTop
DefWindowProcA
GetCursorPos
PostMessageA
SetWindowTextA
CharNextW
GetAsyncKeyState
DefFrameProcW
SetDlgItemInt
GetForegroundWindow
GetDlgItem
SetTimer
LoadBitmapA
SetWindowRgn
GetKeyboardLayout
LoadCursorA
SetWindowPos
MessageBeep
GetCapture
MonitorFromWindow
GetSystemMetrics
EnumChildWindows
CreateDialogParamW
GetTopWindow
GetDlgItemInt

gdi32

GetOutlineTextMetricsW
GetPixel
SetPolyFillMode
CreateMetaFileW
SetTextCharacterExtra
RemoveFontResourceA
GetCharacterPlacementW
GetEnhMetaFileDescriptionA
GetCharWidthI
StrokeAndFillPath
PatBlt
CreateDCA
SetPixel
SetEnhMetaFileBits
GetTextCharacterExtra
PtInRegion
GetRegionData
UnrealizeObject
GetDeviceCaps
GetTextExtentExPointI
FillPath

advapi32

RegOpenKeyA
RegOpenKeyA
RegDeleteKeyW
RegSaveKeyA
RegQueryValueW
RegRestoreKeyW
RegDeleteValueA
RegQueryInfoKeyW

shlwapi

StrPBrkW
PathUndecorateW
StrChrNW
StrStrNW
StrStrA
SHRegSetPathW
AssocQueryStringW
SHCopyKeyA
StrStrNIW
PathSearchAndQualifyA
SHRegGetBoolUSValueW
GetMenuPosFromID
StrRChrA

comctl32

ImageList_Destroy
GetEffectiveClientRect
LBItemFromPt
CreateToolbar

opengl32

glTexCoord4f
glLightModeli
glClearIndex
glRasterPos4s
glArrayElement
glVertex3d
glCopyTexImage2D

setupapi

CM_Create_DevNodeW
SetupDecompressOrCopyFileA
CM_Get_First_Log_Conf_Ex
SetupQueryInfOriginalFileInformationA
CM_Get_Global_State
pSetupStringTableDestroy
CM_Request_Device_Eject_ExA
SetupDiRemoveDevice
pSetupSetGlobalFlags
CM_Add_ID_ExA

Sections

.jOpoQ
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IUUT
Size: 5KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JhGQ
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VyIb
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aGbxcx
Size: 2KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QieU
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.f
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADzKs
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b4075d27700e5508750edc6cdc78137

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

opengl32

setupapi

Sections

.jOpoQ Size: 3KB - Virtual size: 3KB

.IUUT Size: 5KB - Virtual size: 60KB

.JhGQ Size: 84KB - Virtual size: 84KB

.VyIb Size: 13KB - Virtual size: 13KB

.aGbxcx Size: 2KB - Virtual size: 150KB

.QieU Size: 4KB - Virtual size: 37KB

.f Size: 82KB - Virtual size: 82KB

.data Size: 6KB - Virtual size: 77KB

.ADzKs Size: 3KB - Virtual size: 23KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.jOpoQ
Size: 3KB - Virtual size: 3KB

.IUUT
Size: 5KB - Virtual size: 60KB

.JhGQ
Size: 84KB - Virtual size: 84KB

.VyIb
Size: 13KB - Virtual size: 13KB

.aGbxcx
Size: 2KB - Virtual size: 150KB

.QieU
Size: 4KB - Virtual size: 37KB

.f
Size: 82KB - Virtual size: 82KB

.data
Size: 6KB - Virtual size: 77KB

.ADzKs
Size: 3KB - Virtual size: 23KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B