8ba792976a8c4be179f110b874dd569e

Sharing

Copy URL Twitter E-mail

General

Target

8ba792976a8c4be179f110b874dd569e
Size

196KB
MD5

8ba792976a8c4be179f110b874dd569e
SHA1

ce96fc2f0a76a5ac709dc7e37ed26bd18e68180f
SHA256

7d033d88e54a85d610c309adc894c043d21e267e9b184729dbbaf46667c5e077
SHA512

a8e5722989ab7660f4e4f8b64fb1144d3b6a4ea36d9900242e6e0eb28aafcebaf8f54ead1b63f32a70da9746fc62a01e28e189c539ce03daddd0e48fd970a8f4
SSDEEP

1536:YI4fMIg8CRYHSzJ6u6EZZd5VwntyLYFMZjY9P2p4nFvIk25b/REidY8Rqqxl2z72:x4fMTmHRu6IxLYUUYiFvgxST8GE5k6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ba792976a8c4be179f110b874dd569e

Files

8ba792976a8c4be179f110b874dd569e
.exe windows:5 windows x86 arch:x86

ee502a6500ab8b2c75291b19e2903ae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\luf_civejovij-gej19\lejuyovul.pdb

Imports

kernel32

WriteConsoleInputA
GetConsoleAliasesW
OpenEventA
HeapUnlock
GetUserDefaultLangID
EnumDateFormatsW
VirtualProtect
GlobalAlloc
GetACP
CreateMutexW
ReleaseMutex
GetAtomNameW
CreateJobObjectW
GetTempPathA
GetProcessHeap
CompareStringA
GetGeoInfoW
InitializeSListHead
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
LoadLibraryA
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

advapi32

CloseEventLog

Exports

Exports

@GetFirstVice@0
@GetVice@0

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee502a6500ab8b2c75291b19e2903ae7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 123KB

.data Size: 55KB - Virtual size: 1.7MB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 124KB - Virtual size: 123KB

.data
Size: 55KB - Virtual size: 1.7MB

.rsrc
Size: 16KB - Virtual size: 15KB