8c83ef473a2f62b0c780387a5058913c

General

Target

8c83ef473a2f62b0c780387a5058913c
Size

136KB
MD5

8c83ef473a2f62b0c780387a5058913c
SHA1

165a149c6f2a2388759dfc563a06f3015dee9a58
SHA256

bdb971813f0fa05991384623c89da4171229bede00f96a6016b4197df5c5e972
SHA512

45ef249f616c4ded9cf14ff1f2d79d737aaee28815ab80be46f6c525b9c6dbd21ddcdaf908a798dac42f94e03d765adbb1209153f71738d3a5a7446383638021
SSDEEP

3072:XQGRzXgI4B7gjiATyEAQiXthEYFhKQsxUslkBE:gAH4B0+ATyEwXtnhKQsxUsls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c83ef473a2f62b0c780387a5058913c

Files

8c83ef473a2f62b0c780387a5058913c
.exe windows:4 windows x86 arch:x86

8d82077121f25ca0b9bbc105256370e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
lstrcmpiW
GetACP
GetCurrentThread
SetLastError
GetOEMCP
GetConsoleOutputCP
GetProcessHeap
DeleteFileA
GetCurrentThreadId
IsDebuggerPresent
lstrlenW
GetCurrentProcessId
GetUserDefaultLangID
SetCurrentDirectoryA
GlobalFindAtomW
GetModuleHandleW
GetCommandLineA
CopyFileA
GetThreadLocale
GetModuleHandleA
RemoveDirectoryA
DeleteFileW
lstrcmpA
lstrlenA
MulDiv
GetVersion
GetCurrentProcess
GetLastError
GetTickCount
GetCommandLineW
VirtualAlloc

user32

CharNextA

gdi32

SetMapMode
GetBrushOrgEx
GetDIBColorTable
EndPath
GetPaletteEntries
SetStretchBltMode
RectVisible
CreatePen
MaskBlt
SetTextColor
BeginPath
SetColorSpace
UnrealizeObject
EndPage
GetClipBox
DeleteDC
StartPage
GetEnhMetaFilePaletteEntries
GetStockObject
BitBlt
SetViewportOrgEx
MoveToEx
ExcludeClipRect
SelectClipPath
PtVisible
ScaleViewportExtEx
EndDoc
PlayEnhMetaFile
SaveDC
LineTo
SetBkColor
SetDIBColorTable
SetROP2
SetBrushOrgEx
GetCharWidth32A
DeleteObject
Chord
GetPixel
SelectObject
SetWindowExtEx
CreateCompatibleBitmap
CreateRectRgn
GetDCOrgEx
IntersectClipRect
GetTextMetricsA
CreatePatternBrush
RestoreDC
SelectPalette
GetDeviceCaps
CreateBitmap
OffsetViewportOrgEx
Rectangle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d82077121f25ca0b9bbc105256370e5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 103KB - Virtual size: 103KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 103KB - Virtual size: 103KB

.rsrc
Size: 16KB - Virtual size: 15KB