8706f5bbb8107019396a350c0a04aed4

Sharing

Copy URL

Twitter E-mail

General

Target

8706f5bbb8107019396a350c0a04aed4
Size

3.7MB
MD5

8706f5bbb8107019396a350c0a04aed4
SHA1

f84135e79becc74de0a1075ed2ba15e5ec3a7b21
SHA256

98d5c1fdbc2cfb1bb909921d699432761778d350670471b0cca94acc4a862e17
SHA512

06b0b364ab0e52dc3bfd92489e1d5c013c5f3ea5ab6140a265de4a6bb1b2d6ac34225285c85b336e246c9090e07a339e8ed41cbfe13280373ef9057bfd453abe
SSDEEP

49152:v2H1GFtGrDn4444mmmmmykWqDrtCrGmlWiZYTCzsWfVR4OVc9BLVUrMAEu0HyTDN:C1ItIYWqdCSH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8706f5bbb8107019396a350c0a04aed4

Files

8706f5bbb8107019396a350c0a04aed4
.exe windows:4 windows x86 arch:x86

e2bc23cb2f7e1a4854c7d7de162b9edc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
MulDiv
GetModuleFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
SetLastError
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
WaitForSingleObject
GetModuleFileNameW
CreateThread
MoveFileExA
GetTempPathW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentProcess
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
FlushInstructionCache
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetLastError
lstrlenW
WideCharToMultiByte
LoadLibraryExA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetSystemInfo
VirtualProtect
CreateFileA
WriteFile
CloseHandle
GetTickCount
Sleep
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException

user32

SetWindowLongA
GetWindowLongA
CreateWindowExA
SendMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MessageBoxA
CallWindowProcA
ReleaseDC
GetDC
GetDesktopWindow
wsprintfA
CharNextA
DefWindowProcA
GetSysColor
MoveWindow
SetWindowPos
GetClientRect
ClientToScreen
ScreenToClient
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
IsChild
GetParent
GetDlgItem
UnregisterClassA
LoadIconA
ShowWindow
SetForegroundWindow
DestroyIcon
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
RegisterClassExA
LoadCursorA
GetClassInfoExA
IsWindow
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
DestroyWindow
FillRect
ReleaseCapture
GetClassNameA

advapi32

RegQueryInfoKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
OpenSCManagerW
CloseServiceHandle
OpenServiceW
StartServiceW
ControlService
RegDeleteKeyA

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitialize

oleaut32

SysAllocString
SysStringLen
SysFreeString
SysAllocStringLen
VarUI4FromStr
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi

gdi32

GetStockObject
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps

ntdll

_stricmp
ZwEnumerateKey
RtlUnwind
NtCreateFile
ZwOpenKey
ZwQueryValueKey
NtWriteFile
NtReadFile
NtQueryInformationFile
NtSetInformationFile
NtQuerySystemInformation
RtlFreeHeap
RtlAllocateHeap
NtClose

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2bc23cb2f7e1a4854c7d7de162b9edc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

gdi32

ntdll

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 147KB - Virtual size: 146KB

.data Size: 7KB - Virtual size: 14KB

.rsrc Size: 3.5MB - Virtual size: 3.5MB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 147KB - Virtual size: 146KB

.data
Size: 7KB - Virtual size: 14KB

.rsrc
Size: 3.5MB - Virtual size: 3.5MB