8baff4f5cb900e02055d8fe74a9811f6

General

Target

8baff4f5cb900e02055d8fe74a9811f6
Size

56KB
MD5

8baff4f5cb900e02055d8fe74a9811f6
SHA1

1cadb2ae848efba9445cbf17d4a66a03def0febe
SHA256

ba9269dd79381a08ac543c4c873f74b89458948534ee68b82acff6cb407f4a6f
SHA512

a13a6a21295115dbb05f7af2eba7bc9aeff0c02171bf284c08aed9c8afc56cbf8f5bd0291c3cb47fd1cddbddce80178e7e67e4163a94c39aba43ab240056ffd9
SSDEEP

768:KE1oKFXAKA5HtBcP4K4t3T4CgBMQSanNs5nb3Llyqw4OiKUAH2+4TbHyGkvYzopb:iKFwb9U2clMQXg7UNUuc6WopIps

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8baff4f5cb900e02055d8fe74a9811f6

Files

8baff4f5cb900e02055d8fe74a9811f6
.exe windows:5 windows x86 arch:x86

670749e90afe1b52b739df22b6ebd28d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\rjbacvM\xGfjYtoc\vgvzld\mvuhzi\ynkmA.pdb

Imports

user32

DrawCaptionTempW
CharToOemW
GetDoubleClickTime
GetFocus
CharToOemBuffA
IsChild
BeginPaint
IsCharAlphaNumericA
DragObject
MessageBoxW
LoadImageW
TileWindows
CharUpperBuffA
PtInRect

shlwapi

StrCmpIW

kernel32

GetThreadContext
lstrcpynA
GetCommandLineA
GlobalGetAtomNameW
FileTimeToSystemTime
CreateFileW
QueryDosDeviceW
lstrcmpW
SetThreadLocale
TlsSetValue
GlobalAddAtomW
GetSystemWindowsDirectoryA
GetAtomNameA

comctl32

PropertySheetW
DestroyPropertySheetPage
ImageList_GetIconSize
ImageList_Destroy

gdi32

GetNearestColor
Polygon
CreateFontA
CreateRectRgn
TextOutA
OffsetRgn
WidenPath
GetTextFaceW
SetPaletteEntries

Exports

Exports

?HvztQcivyaymazgJa@@YGI_NI@Z
?WpbsxNdiaub@@YGGPAJ@Z
?_OvdywmVoawnenl@@YGFG@Z
?GdunygF@@YGEI@Z
?Xeolrpfq@@YGPAIE@Z
?_JqjatDlvxqhasjrWkwjs@@YGPAMPAD@Z

Sections

.itext
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

670749e90afe1b52b739df22b6ebd28d

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

kernel32

comctl32

gdi32

Exports

Exports

Sections

.itext Size: 22KB - Virtual size: 21KB

.text Size: 6KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 22KB - Virtual size: 21KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 2KB - Virtual size: 1KB