8b08d1f6f2fe75408000882f21c0ed86

General

Target

8b08d1f6f2fe75408000882f21c0ed86
Size

44KB
MD5

8b08d1f6f2fe75408000882f21c0ed86
SHA1

3ac1f783d6e6e74cf53d83be11e521d642b13678
SHA256

dac8eb949015611e5e525922c63bf7c4ea16462584453919d224defc81704662
SHA512

c5272c64e4579d0906b8e35598839af08cefb562bbf43f73e20ac1c1078eb63e739cc599e308f4edb4af0a0d1a1f3f3780a993b5d004c37cffefb7b7072670e7
SSDEEP

768:CE28vSAglTwmCAPZgA9BnqH6Bqh0H4ATt:67lTeAPZgFGYqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b08d1f6f2fe75408000882f21c0ed86

Files

8b08d1f6f2fe75408000882f21c0ed86
.exe windows:4 windows x86 arch:x86

f73804a97ba916e9aa107e34c97d9ad2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualFreeEx
VirtualAllocEx
GetModuleFileNameA
OpenProcess
GetVersionExA
GetVersion
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

lsaext

SetAccessPriv

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f73804a97ba916e9aa107e34c97d9ad2

Headers

File Characteristics

Imports

kernel32

advapi32

lsaext

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB