8820e9f0142800d379f4c434176cc438

General

Target

8820e9f0142800d379f4c434176cc438
Size

72KB
MD5

8820e9f0142800d379f4c434176cc438
SHA1

b0ab303d911b9dabf07e82a4d5a9e9341e350d86
SHA256

14f7774778c53970747f54a9cdc297e6499c858004cc42a5d11689662af4416e
SHA512

c842296ba80e7240302a9911910c0676f89b984bb91cc350791a6d9f1ed7046eb938f396c50037a0e835f79ab423aa662ed4ff9178276d8b80b7232ee0327fd5
SSDEEP

1536:tzLmtRCk7G9EeoMsimilfrRtSqoceFhN:tzLXE/idHolN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8820e9f0142800d379f4c434176cc438

Files

8820e9f0142800d379f4c434176cc438
.dll windows:4 windows x86 arch:x86

4a9931a0868ded81f1ed128df77be6d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

ConvertStringSidToSidA
ObjectOpenAuditAlarmA
ImpersonateNamedPipeClient
GetTraceEnableFlags
ElfNumberOfRecords
RegisterEventSourceA

kernel32

RtlUnwind
lstrlenW
lstrcatA
SetProcessWorkingSetSize
SetLastError
MultiByteToWideChar
IsBadStringPtrA
CloseHandle
ExitProcess
FormatMessageA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc

ole32

CoCreateInstance
CoTaskMemFree
IsEqualGUID
CLSIDFromString

setupapi

SetupDiAskForOEMDisk
SetupCloseFileQueue
SetupDiGetINFClassA

olepro32

OleTranslateColor
OleLoadPicture
OleCreatePropertyFrameIndirect
OleCreateFontIndirect
OleCreatePropertyFrame

user32

AppendMenuA
CheckRadioButton
CloseClipboard
CreatePopupMenu
DestroyWindow
DialogBoxParamA
EnableMenuItem
EnumChildWindows
ExitWindowsEx
GetClassLongA
GetMenuItemCount
GetMenuItemID
GetWindowDC
KillTimer
LoadIconA
LoadMenuA
MessageBoxA
PostMessageA
RedrawWindow
ScreenToClient
SendMessageA
SetClassLongA
SystemParametersInfoA

Sections

.text
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a9931a0868ded81f1ed128df77be6d8

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

setupapi

olepro32

user32

Sections

.text Size: 59KB - Virtual size: 60KB

.data Size: 9KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 59KB - Virtual size: 60KB

.data
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB