8b4c77aba977911b3c374568c580a084

General

Target

8b4c77aba977911b3c374568c580a084
Size

173KB
MD5

8b4c77aba977911b3c374568c580a084
SHA1

130b292d889dd4b1c22078eca9ea989e12fb15c3
SHA256

c66b5f031e3971223ebe365f91239490fb6fde0591e31e67294be91306e9fb6a
SHA512

3d5c2f383846327507b501b9d13ef24cd2bbce94b44a985ae2a96abc077b4517a67115757078481849148ec3411c8310087587c4fb9c24d030a0b2e5127f1b34
SSDEEP

3072:62piksEoCJQCVjl5w+kpquPbUBTuzwXFbW8gqcxVxOtlkiiC0:623aCVjl5UpqYbUVuzwXFiqcxV1ii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4c77aba977911b3c374568c580a084

Files

8b4c77aba977911b3c374568c580a084
.exe windows:4 windows x86 arch:x86

5fc3e8da6a090f24e24d45866c7de2dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
GetCurrentProcessId
TlsFree
GetCurrentProcess
SetUnhandledExceptionFilter
HeapFree
GetCurrentThread
GetStartupInfoA
GlobalMemoryStatus
GetComputerNameA
DeviceIoControl
GetModuleHandleW
TlsGetValue
SetHandleCount
GetVersionExA
GetVersion
GetFileType
CloseHandle
RaiseException
GetDiskFreeSpaceA
EnumResourceNamesA
HeapAlloc
GetCommandLineA
OutputDebugStringW
SetLastError
GetLocalTime
RtlUnwind
GetStdHandle
GetSystemTimeAsFileTime
TlsAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
TerminateProcess
GetProcessHeap
TlsSetValue
InterlockedExchange

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

gdi32

Rectangle
CloseFigure
LineTo
FillPath
EndPath
PolyBezierTo
GetClipBox
SetBrushOrgEx
GetGraphicsMode
CreatePatternBrush
GetStockObject
PolylineTo
MoveToEx
IntersectClipRect
BeginPath
SetGraphicsMode
GetWorldTransform
SetROP2
SelectClipPath
PolyDraw

Sections

.text
Size: 92KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fc3e8da6a090f24e24d45866c7de2dc

Headers

File Characteristics

Imports

kernel32

setupapi

gdi32

Sections

.text Size: 92KB - Virtual size: 487KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 487KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 4KB