8d05246a7e938967a37572f045faa346

Sharing

Copy URL Twitter E-mail

General

Target

8d05246a7e938967a37572f045faa346
Size

247KB
MD5

8d05246a7e938967a37572f045faa346
SHA1

f30ed258f9c91b556adf970d2fc8690bc441c890
SHA256

75e9649d636b66501e037508bd452a440b6d6f6ec674bac32d7f47edee8e7f52
SHA512

1872995bd8b5e6fc665fedcf61598c05a4b5e3fa6a27ff6aad1aa457319e6a5a2e7151d529632788c94d3e938500cda0f73bc538fb5037f1a0f43a8b970ffbd8
SSDEEP

6144:b1At9BrxHS28w6zfENsaSSlip2v2UiSyPR1moAm:b1At95xHZafEyFwv2mwDL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d05246a7e938967a37572f045faa346

Files

8d05246a7e938967a37572f045faa346
.dll windows:4 windows x86 arch:x86

fc7ecdc2a0edc76bb750a5da087d073a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
ExitProcess
GetModuleHandleA
lstrlenW
GetOEMCP
LoadLibraryExA
VirtualAlloc
GetCommandLineW
GetACP
LoadLibraryA
ExitThread
IsBadHugeReadPtr
GetProcAddress

comdlg32

FindTextA
GetOpenFileNameA
ChooseColorA

user32

GetWindowPlacement
IsZoomed
GetTopWindow
GetWindowLongW
KillTimer
InsertMenuItemA
GetWindow
IsWindowVisible
IsWindowUnicode
GetSysColorBrush
GetWindowDC
GetWindowLongA
InsertMenuA
IsWindow
IsRectEmpty
GetSubMenu
GetWindowThreadProcessId
IsWindowEnabled
IsIconic
IsDialogMessageA
GetScrollRange
GetWindowRect
GetWindowTextA
IntersectRect
IsChild
InvalidateRect
GetSystemMenu
InflateRect
GetSysColor
IsDialogMessageW

Sections

CODE
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc7ecdc2a0edc76bb750a5da087d073a

Headers

File Characteristics

Imports

kernel32

comdlg32

user32

Sections

CODE Size: 64KB - Virtual size: 64KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 159KB - Virtual size: 158KB

.bdata Size: 512B - Virtual size: 76KB

DATA Size: 9KB - Virtual size: 8KB

.ddata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 836B

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 64KB - Virtual size: 64KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 159KB - Virtual size: 158KB

.bdata
Size: 512B - Virtual size: 76KB

DATA
Size: 9KB - Virtual size: 8KB

.ddata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 836B

.reloc
Size: 2KB - Virtual size: 1KB