8a07c24cab5aeb554b81eba01b0df120

Sharing

Copy URL

Twitter E-mail

General

Target

8a07c24cab5aeb554b81eba01b0df120
Size

45KB
MD5

8a07c24cab5aeb554b81eba01b0df120
SHA1

60aaf35224889dabfcb8b2a07711c454efcea7e5
SHA256

0d5174080d8ad705483cd8acdf48f7c67706b0a2c7879e4b974bfb28d75c1792
SHA512

7c535c34107baf762c5681589833a7c849029d03a4791f1be86ec4ec99fc1cd7fe42d174f96c7cd24dd57b1e98aacebd7aaa839168cbcbf69c4ce4ffa7708597
SSDEEP

768:J7Ud6M97f8X6ElMTaUMMnMMMMMQqvuOYQIYQDvmIhBfVRqX1iDXfK1OJ1ngHN78w:JUd6cj8X62MTaUMMnMMMMMQqvuOYQIYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a07c24cab5aeb554b81eba01b0df120

Files

8a07c24cab5aeb554b81eba01b0df120
.exe windows:5 windows x86 arch:x86

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSuspendProcess
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
NtQuerySemaphore

uxtheme

GetThemeMargins
CloseThemeData
GetThemeFont
OpenThemeData
DrawThemeBackground
IsAppThemed
DrawThemeParentBackground
GetThemeAppProperties
GetThemeMetric
GetThemeBackgroundContentRect
IsThemeActive
GetThemeBackgroundExtent
SetWindowTheme
GetThemePartSize
GetThemeColor

shell32

SHGetPathFromIDListA
SHGetFolderPathW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
SHCreateShellItem
ExtractAssociatedIconExW
SHBindToParent
SHGetSpecialFolderPathW
ShellExecuteA
SHChangeNotify
SHPathPrepareForWriteW
SHGetDataFromIDListW
SHAppBarMessage
ExtractIconExW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderLocation
ShellAboutW
SHGetFileInfoW
SHGetInstanceExplorer
DragQueryFileW
ExtractIconW
SHGetDesktopFolder
SHSetLocalizedName
SHGetFolderPathAndSubDirW
ShellExecuteExW
Shell_NotifyIconA
SHGetFolderLocation

kernel32

VirtualAlloc

psapi

GetProcessImageFileNameW

rtutils

TraceDumpExA
RouterLogEventStringA
LogErrorW
RouterLogRegisterA
RouterGetErrorStringW
RouterLogEventExA

ddraw

DirectDrawCreate

Sections

.text
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

uxtheme

shell32

kernel32

psapi

rtutils

ddraw

Sections

.text Size: 1024B - Virtual size: 996B

.rsrc Size: 26KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 40KB

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 12KB - Virtual size: 11KB

.text
Size: 1024B - Virtual size: 996B

.rsrc
Size: 26KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 40KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 12KB - Virtual size: 11KB