8825690961b614764a462bff839bc796

General

Target

8825690961b614764a462bff839bc796
Size

52KB
MD5

8825690961b614764a462bff839bc796
SHA1

3336d372e825f461d30cecf99e2481ab35c1979d
SHA256

8153dedc219f191581bfd7c9b76f46a280ba5a909e8f23f0d3b1b5267c7ae2fe
SHA512

cf25dec9dcf4e614ccc6c1b7f4b70f693264ecc2f9afd7999325c7e86a70612917722e193715b567b03365a73d55e7ffc8b388b0e98ba6ce14caf2f38b20d06f
SSDEEP

768:N8XZqylJg7pUQejHrNbjOG88CyVA5XDscBIuHyfnO:N8pHJJJLE7aVAS0IHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8825690961b614764a462bff839bc796

Files

8825690961b614764a462bff839bc796
.exe windows:4 windows x86 arch:x86

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalAlloc
LocalHandle
LocalFree
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
lstrcpyA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetProcAddress
HeapAlloc
VirtualAlloc
LoadLibraryA

winspool.drv

EnumPrintersA

advapi32

RegFlushKey
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zmhczrq
Size: 4KB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5d0cb3ea2509d3552f2fd9562f5315b0

Headers

File Characteristics

Imports

kernel32

winspool.drv

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 823B

.data Size: 9KB - Virtual size: 10KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 27KB - Virtual size: 29KB

zmhczrq Size: 4KB - Virtual size: 84KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 823B

.data
Size: 9KB - Virtual size: 10KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 27KB - Virtual size: 29KB

zmhczrq
Size: 4KB - Virtual size: 84KB