8cf5f5c39d2c9081dedb4ba95571592b

General

Target

8cf5f5c39d2c9081dedb4ba95571592b
Size

352KB
MD5

8cf5f5c39d2c9081dedb4ba95571592b
SHA1

b0afcecffb3cc7c6668f4c8d6191cffafe182efe
SHA256

81bf0cd4ed32c76b9baf132de966473033a294c3df5c15bb8bb557ef04b7befa
SHA512

9db4bad1bd1b1bd3cbfc9df9459ff0794344a4da9ab06c1ab17f39ec212905966065487ff59eeb77ee1dd66619792ecb3e584723ba9bf4bc253dd3be685e991b
SSDEEP

6144:tv3lWHb8jZTBLaJ+1DPUBiEdQZOMbe0qJF2dw3VwoRMWhHiZ7J3tAtOzzbR:tv32b8jiuUBT+thqJF2AjhHoJ39t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf5f5c39d2c9081dedb4ba95571592b

Files

8cf5f5c39d2c9081dedb4ba95571592b
.exe windows:4 windows x86 arch:x86

ffff0e1d6a9582f620100803a57456be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetProcessHeap
LoadLibraryA
lstrlenW
lstrcpyW
InterlockedIncrement
InterlockedDecrement
HeapDestroy
GetStringTypeExW
GetThreadLocale
DebugBreak
OutputDebugStringW
TerminateProcess
FreeLibrary
GetProcAddress
lstrcmpW
GetCurrentProcess
RaiseException
GetCurrentThreadId
GetACP
CreateEventW
WaitForMultipleObjects
CloseHandle
SetEvent
CreateThread
GetModuleHandleA
LocalAlloc
GetCommandLineA
lstrlenA
VirtualProtect
GetStartupInfoA

user32

RegisterWindowMessageW
wvsprintfW
GetDlgItem
GetDlgItemTextW
MessageBoxW
RedrawWindow
SetFocus
ShowWindow
GetParent
EnableWindow
wsprintfW
CreateDialogParamW
DestroyWindow
CreateWindowExW
DefWindowProcW
SendMessageW
GetClientRect
GetWindow
GetWindowLongW
SetWindowLongW
ReleaseDC
GetClassInfoExW
LoadCursorW
RegisterClassExW

advapi32

OpenSCManagerW
CloseServiceHandle
QueryServiceStatus

ole32

CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoUninitialize

rpcrt4

UuidCreate

msvcrt

__p__fmode
__p__commode
__setusermatherr
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_wtol
wcsncmp
_adjust_fdiv
memmove
qsort
_initterm
malloc
free
wcslen
_except_handler3
_controlfp
__set_app_type

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffff0e1d6a9582f620100803a57456be

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 308KB - Virtual size: 615KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 308KB - Virtual size: 615KB

.rsrc
Size: 4KB - Virtual size: 3KB