8a85331395ef2b0aa8903b013dbf88da

Sharing

Copy URL

Twitter E-mail

General

Target

8a85331395ef2b0aa8903b013dbf88da
Size

105KB
MD5

8a85331395ef2b0aa8903b013dbf88da
SHA1

bb1149483e09cfe8b17c7c1859fea46561e0cd3e
SHA256

bd256b2fda4e2ea67174bfb888f10526122ebc2a6a7bc22fed400f2134a30459
SHA512

39dfd5c760b6359bf9ee776cab81ff8f6c381518aa9bb41206ace53244e87405ab5ecab2c765048a89452b55c4608b1f310160b0f4defe1a9b14a14dd137cbfc
SSDEEP

3072:fUaktPyvwhs7gwu3vuOfQ8+OgBgMVKmRuqBPpbQ:fvkCwmMwu3vjQ5Hg0K/qBPpb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a85331395ef2b0aa8903b013dbf88da

Files

8a85331395ef2b0aa8903b013dbf88da
.exe windows:4 windows x86 arch:x86

c4baa7178daa62733816a24520990295

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate
DirectDrawEnumerateA
DirectDrawCreateEx

kernel32

LCMapStringA
RtlUnwind
GetSystemInfo
GetVersionExA
CreateConsoleScreenBuffer
FreeEnvironmentStringsA
IsBadWritePtr
CreateToolhelp32Snapshot
HeapReAlloc
GetProcessVersion
GetStartupInfoA
HeapDestroy
GetModuleFileNameA
FreeEnvironmentStringsW
HeapAlloc
UnhandledExceptionFilter
WriteFile
ExitProcess
VirtualProtect
VirtualAlloc
HeapFree
HeapSize
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStdHandle
GetCommandLineA
HeapCreate
VirtualQuery
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetCurrentProcess

shlwapi

PathAddBackslashW
PathCombineW
PathFindExtensionW
PathRemoveFileSpecW
PathAppendW

shell32

ShellExecuteExW

user32

IsDlgButtonChecked
LoadStringW
SetWindowPos
DispatchMessageW
PostMessageW
GetMessageW
RegisterWindowMessageA
DefWindowProcW
PostQuitMessage
RegisterClassExW
FindWindowW
GetWindowRect
DialogBoxParamW
GetSystemMetrics
wsprintfW
EndDialog
CreateWindowExW
TranslateMessage
DestroyWindow

ole32

CoUninitialize
CoInitialize
CoCreateInstance
GetRunningObjectTable
CreateClassMoniker

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegEnumValueA
RegEnumValueW
RegCreateKeyExW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4baa7178daa62733816a24520990295

Headers

File Characteristics

Imports

ddraw

kernel32

shlwapi

shell32

user32

ole32

advapi32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 33KB - Virtual size: 32KB

.rsrc Size: 1024B - Virtual size: 84KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1024B - Virtual size: 84KB