8ccfac6e16f2d7304014f12ff8ec09dd

Sharing

Copy URL Twitter E-mail

General

Target

8ccfac6e16f2d7304014f12ff8ec09dd
Size

1.6MB
MD5

8ccfac6e16f2d7304014f12ff8ec09dd
SHA1

4e5b508424f794796867829c21cd19a067f3e2e2
SHA256

08fe96221d2aaea1351f1609b741f03bc86bb2a0073852f5285e0e3d3462dfa6
SHA512

b181c478d55d943a281ccc91fa6a5f25a74515fc487e11d20b06979cd78e0d73c969ada41f4258c9af2b4bc0e473e38cb03bb10edbdccd70f743a06595abb030
SSDEEP

49152:qE678EX1L88D2NpMf9ydaE3G87pk7+5g2rwoTHgg8DUH5VX:q8k1LbKNp2UaXipka5trwoTHgg8DUrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ccfac6e16f2d7304014f12ff8ec09dd

Files

8ccfac6e16f2d7304014f12ff8ec09dd
.exe windows:4 windows x86 arch:x86

28fda2b61881c063b6b3bb68b950377d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetSystemTime
FreeLibraryAndExitThread
OpenSemaphoreW
VirtualAlloc
LoadLibraryExW
SetCommMask
SetProcessAffinityMask
GlobalFindAtomW
RaiseException
EndUpdateResourceA
WritePrivateProfileStructA
GetDriveTypeW
FreeResource
GetCommState
WaitNamedPipeA
CreateMutexA
IsBadWritePtr
RemoveDirectoryW
VirtualQuery
SetConsoleWindowInfo
PulseEvent
ReadConsoleA
WritePrivateProfileSectionA
SetConsoleOutputCP
FindFirstFileExW
SetEnvironmentVariableW
PeekConsoleInputW
GetLargestConsoleWindowSize
GetEnvironmentVariableW
GetThreadPriority
GetProcessTimes
SetConsoleMode
MoveFileExA
SetMailslotInfo
GetShortPathNameA
SetTimeZoneInformation
PurgeComm
GetTempFileNameA
UnmapViewOfFile
GenerateConsoleCtrlEvent
WriteFile
GetTapeParameters
_lopen
IsValidLocale
ReadConsoleInputW
GetLocaleInfoW
MultiByteToWideChar
GetCurrentProcess
FindResourceExW
CopyFileExW
GetConsoleMode
CreateIoCompletionPort
WriteConsoleOutputW
GlobalAddAtomA
GetSystemDirectoryW
SwitchToFiber
GetNumberFormatW
lstrcpyA
GetSystemInfo
WriteConsoleOutputCharacterA
GetOverlappedResult
GetTempPathW
LocalAlloc
GetEnvironmentStringsW
EnumResourceNamesW
GetFullPathNameA
LocalReAlloc
GetHandleInformation
EnumCalendarInfoW
GlobalGetAtomNameW
DosDateTimeToFileTime
GetACP
_llseek
SetEvent
SetCurrentDirectoryA
SetHandleCount
EraseTape
GetCommModemStatus
CreateFileW
LocalLock
GetCurrentProcessId
IsDBCSLeadByteEx
ExitThread
OpenMutexA
GetTickCount
SetThreadAffinityMask
GlobalFindAtomA
SetCommTimeouts
GetCommandLineW
VirtualProtect
GetFileAttributesExA
GlobalFree
ExitProcess

user32

DrawTextA
GetDC
IsZoomed
GetClipboardData
DrawTextExA
GetCursorPos
SendDlgItemMessageA
DrawStateA
GetKeyboardLayoutNameA
IsRectEmpty
CallWindowProcW
PeekMessageW
ChangeMenuW
GetWindowTextLengthW
GetWindowInfo
GetAncestor
LoadBitmapW
InflateRect
LoadMenuIndirectW
GetParent
MenuItemFromPoint
SetParent
LoadMenuA
MonitorFromRect
SetWindowRgn
InSendMessage
GetTabbedTextExtentA
HideCaret
GetMenuStringW
SetDlgItemInt
DialogBoxIndirectParamA
DeleteMenu
CharToOemW
GetDlgItemTextW
DrawStateW
GetWindowTextW
SetClassLongA
CloseWindow
SetPropW
DispatchMessageW
DestroyMenu
InternalGetWindowText
GetThreadDesktop
EnumDesktopsW
SendMessageW
CheckMenuRadioItem
ValidateRect
SetLastErrorEx
SetRectEmpty
CharNextExA

gdi32

GetDIBColorTable
EnumObjects
SetPaletteEntries
CreateFontA
GetCurrentPositionEx

comdlg32

GetOpenFileNameW
ChooseColorA

advapi32

LookupAccountSidW
SetPrivateObjectSecurity
LogonUserW
QueryServiceConfigW
ReportEventW
EnumServicesStatusA
RegReplaceKeyW
QueryServiceConfigA
RegQueryValueW
GetSecurityDescriptorOwner
SetKernelObjectSecurity
LookupPrivilegeNameA
SetSecurityInfo
RegDeleteValueA

shell32

SHGetSettings
SHLoadInProc
SHGetSpecialFolderLocation

ole32

OleFlushClipboard
CoInitializeEx
GetRunningObjectTable
IIDFromString
OleSetContainedObject
CoRegisterClassObject
CoGetObject
PropVariantCopy

oleaut32

LoadTypeLibEx
VariantCopy
VariantChangeType
SafeArrayUnaccessData
SysStringLen
LoadTypeLi

shlwapi

StrRetToStrW
StrRChrA
SHRegOpenUSKeyW
PathAddExtensionW
StrChrIA
StrFormatByteSizeA
wvnsprintfW
PathUnquoteSpacesA
UrlCreateFromPathW
wnsprintfW
StrCatW
SHSetThreadRef
PathIsDirectoryW
StrCpyNW
PathCommonPrefixW
StrCmpNW
PathRemoveBackslashA

Sections

.text
Size: 6KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28fda2b61881c063b6b3bb68b950377d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 6KB - Virtual size: 222KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 222KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 17KB - Virtual size: 16KB