8b4efbfe4e2c2a5d0d1358b57299ace7

Sharing

Copy URL Twitter E-mail

General

Target

8b4efbfe4e2c2a5d0d1358b57299ace7
Size

308KB
MD5

8b4efbfe4e2c2a5d0d1358b57299ace7
SHA1

e3d357259eceb66eaf639c1e6faf421054a551d4
SHA256

75fa70789f57b5295d710c367386a48e0a6c591d3fef8b4d33813b71b8a2f23a
SHA512

4b04a3eb3f1c3472785a920aa9cd3836dd565f46068f5a38ac44ffb2d025fb0989f8fe31547938969f200fd336dbc5a88a66aa740753fb60414836cf8f641137
SSDEEP

6144:TBQ/H/myXITpduHCpgMUcl3C1+AskuAxGZUG77EDVAehsWbqV5:NQ/BGjGcl3C1+Azu5/3EZASY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4efbfe4e2c2a5d0d1358b57299ace7

Files

8b4efbfe4e2c2a5d0d1358b57299ace7
.exe windows:4 windows x86 arch:x86

f093266ec50407f0408ba64d4f127758

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
_lclose
MoveFileW
GlobalUnlock
GlobalGetAtomNameW
SetLastError
GetOverlappedResult
WriteConsoleOutputW
VirtualQueryEx
FindFirstFileExW
GetDiskFreeSpaceW
FlushConsoleInputBuffer
GetConsoleMode
GetThreadPriority
GenerateConsoleCtrlEvent
GetFileAttributesA
IsValidLocale
FindCloseChangeNotification
GetSystemDefaultLangID
ScrollConsoleScreenBufferA
EndUpdateResourceA
GetLargestConsoleWindowSize
CreateFileW
GetCommConfig
EnumTimeFormatsW
Beep
CreateDirectoryW
ReadFile
SetTimeZoneInformation
CompareStringW
SetCurrentDirectoryA
FreeEnvironmentStringsA
GetNumberFormatW
GetProfileIntA
SetConsoleMode
RaiseException
TryEnterCriticalSection
FindNextChangeNotification
VirtualLock
SetCommTimeouts
FindResourceExW
FindResourceExA
LocalReAlloc
GetStartupInfoA
EraseTape
lstrcmpiA
_lopen
GetTapeStatus
GetACP
ExpandEnvironmentStringsW
SystemTimeToFileTime
LoadResource
lstrcmpA
SetHandleCount
IsDBCSLeadByteEx
FreeResource
GetCommState
ExitThread
EnumResourceNamesW
EnumCalendarInfoA
DebugBreak
SetCommMask
PeekNamedPipe
CloseHandle
GetTimeZoneInformation
OutputDebugStringW
WritePrivateProfileStringW
GetProcessTimes
GetPrivateProfileSectionW
GetShortPathNameW
lstrlenA
GetWindowsDirectoryA
VirtualAlloc
GetModuleHandleA

user32

FindWindowExW
GetTabbedTextExtentW
GetThreadDesktop
GetWindowTextA
DrawTextW
ScrollWindowEx
GetSystemMetrics
SetLastErrorEx
ScrollDC
CreateDialogIndirectParamA
PostMessageA
GetMenuInfo
EnumDisplaySettingsW
MessageBoxIndirectW
GetClassNameA
CallNextHookEx
InsertMenuW
DrawCaption
GetMenuDefaultItem
HiliteMenuItem
GetSystemMenu
CreateMDIWindowW
SetMenuItemInfoW
SendMessageTimeoutA
IsCharLowerA
OpenClipboard
SetWindowWord
DefDlgProcA
GetMenuItemCount
InternalGetWindowText
GetCursor
InSendMessage
SetClipboardData
CopyIcon
ToUnicode
BringWindowToTop
SetScrollInfo
GetMonitorInfoW
SetProcessDefaultLayout
GetMenuItemInfoW

advapi32

MakeSelfRelativeSD
RegUnLoadKeyA
QueryServiceObjectSecurity
InitializeSid
InitiateSystemShutdownA
MakeAbsoluteSD
AccessCheck
RegCreateKeyW
SetEntriesInAclW
QueryServiceConfigW
CreateProcessAsUserW
RegQueryValueExW
StartServiceA
GetSecurityDescriptorDacl
CreateServiceA
RegQueryValueA
RegRestoreKeyA
CryptSetProvParam
CryptSignHashW

ws2_32

WSAAsyncGetProtoByName
__WSAFDIsSet
recv
WSAResetEvent
WSARecvFrom
WSACreateEvent
send
WSAAddressToStringA
getservbyport
WSAConnect
gethostname
WSAGetLastError
WSARecv
WSAAsyncGetServByPort
WSALookupServiceBeginA
inet_ntoa
WSAInstallServiceClassA

ole32

OleCreateLink
CreateOleAdviseHolder

comctl32

ImageList_SetOverlayImage

shell32

SHGetSpecialFolderPathA
FindExecutableW
Shell_NotifyIconW

comdlg32

ChooseFontW
PageSetupDlgW

version

VerFindFileA
GetFileVersionInfoSizeA
VerInstallFileA

oleaut32

SafeArrayPutElement
QueryPathOfRegTypeLi
SafeArrayGetElement
SafeArrayRedim

msvcrt

__p__fmode
wcscpy
iswspace
atof
calloc
fgetwc
_wputenv
_fsopen
_mbctolower
_tempnam
putc
ferror
_fstat
_isctype
_sopen
fscanf
wcstok
__p___argv
_vsnprintf
wctomb
ungetc
_wchmod
fwscanf
setvbuf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_mbscpy
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f093266ec50407f0408ba64d4f127758

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

ole32

comctl32

shell32

comdlg32

version

oleaut32

msvcrt

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 60KB - Virtual size: 56KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 60KB - Virtual size: 56KB