8e22bd4037c2b1cc8e1c542de3c03c74

Sharing

Copy URL Twitter E-mail

General

Target

8e22bd4037c2b1cc8e1c542de3c03c74
Size

347KB
MD5

8e22bd4037c2b1cc8e1c542de3c03c74
SHA1

44440586ca3bb98577a127bb479bd453273d7f1d
SHA256

666591da925cca1131638df320cca8432446243e24c627a2f81270f496057118
SHA512

66f0fc12dbd11927b100237c81d32032052678be8d48d1c0735ae94225656647b1a5e35c6b4a65e9660c0c7eeb4b4bb9fd1fd715dea07f5e4a86e719b2dd8e3f
SSDEEP

6144:D6tde9dNzQLQ1Wd2054BVvnifsT7zOAc/bzkPCk12OHj+m8eS:DmRk1O4BtifsvaAEzQCkhD+m8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e22bd4037c2b1cc8e1c542de3c03c74

Files

8e22bd4037c2b1cc8e1c542de3c03c74
.exe windows:4 windows x86 arch:x86

a9024d170052174c91d48130bedcbc63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
IsValidCodePage
GetCurrentThreadId
CompareStringW
GetStringTypeW
DosDateTimeToFileTime
IsDebuggerPresent
WriteConsoleA
SetLastError
CreateMutexA
GetCurrentThread
SetEnvironmentVariableA
EnumDateFormatsA
CreatePipe
Sleep
GetOEMCP
CompareStringA
CreateFileA
GetVersionExA
TlsAlloc
WriteConsoleW
TlsGetValue
GetLocaleInfoA
GetProcAddress
SetUnhandledExceptionFilter
GetModuleHandleA
EnterCriticalSection
SetVolumeLabelA
GetLocaleInfoW
CloseHandle
GetModuleFileNameA
EnumSystemLocalesA
GlobalHandle
EnumResourceNamesA
ReadFile
MultiByteToWideChar
GetProcessHeap
LCMapStringW
GetConsoleMode
LCMapStringA
GetStartupInfoA
DeleteFileA
LeaveCriticalSection
GetLastError
GetConsoleCP
HeapSize
SetHandleCount
GetCurrentProcess
VirtualQuery
SetStdHandle
OpenMutexA
GetCPInfo
GetCommandLineA
GetUserDefaultLCID
VirtualFree
SetConsoleCtrlHandler
VirtualAlloc
FreeEnvironmentStringsW
SetConsoleTitleA
GetComputerNameA
InitializeCriticalSection
GetStdHandle
GetTimeZoneInformation
UnhandledExceptionFilter
TlsSetValue
HeapFree
GetDateFormatA
LoadLibraryA
FreeEnvironmentStringsA
GetACP
GetTimeFormatA
SetFilePointer
FreeLibrary
OpenWaitableTimerA
GetEnvironmentStringsW
LocalShrink
GetFileType
HeapCreate
InterlockedDecrement
GetConsoleOutputCP
HeapDestroy
InterlockedExchange
ReadConsoleOutputCharacterW
WriteFile
GetCurrentProcessId
SetCurrentDirectoryA
HeapAlloc
ExitProcess
QueryPerformanceCounter
GetTickCount
GetStringTypeA
DeleteCriticalSection
GetEnvironmentStrings
RtlZeroMemory
RtlUnwind
GlobalCompact
TlsFree
GetSystemTimeAsFileTime
FlushFileBuffers
GetCompressedFileSizeA
TerminateProcess
HeapReAlloc
WideCharToMultiByte
IsValidLocale

advapi32

RegQueryInfoKeyW
LookupAccountNameW
LookupSecurityDescriptorPartsW
CryptEnumProviderTypesW
RegOpenKeyExA
CryptSignHashW
RegRestoreKeyA
LogonUserA
CryptSetProviderExW
CryptVerifySignatureA

comdlg32

LoadAlterBitmap
GetOpenFileNameA
GetSaveFileNameW

user32

SetUserObjectInformationA
GetKeyboardLayoutList
ReuseDDElParam
RegisterClassA
SetMenuInfo
GetDCEx
RegisterClassExA

comctl32

InitCommonControlsEx

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9024d170052174c91d48130bedcbc63

Headers

File Characteristics

Imports

kernel32

advapi32

comdlg32

user32

comctl32

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 10KB - Virtual size: 33KB

.data Size: 175KB - Virtual size: 175KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 10KB - Virtual size: 33KB

.data
Size: 175KB - Virtual size: 175KB

.rsrc
Size: 8KB - Virtual size: 7KB