8e5560ef7a0e0d890e3a463cfb55a2d1

General

Target

8e5560ef7a0e0d890e3a463cfb55a2d1
Size

198KB
MD5

8e5560ef7a0e0d890e3a463cfb55a2d1
SHA1

ff80dda537e0b2aed5dea49c878d1ac135a255aa
SHA256

715383d3d3ca82e5282b120bbac4e00ea3b99edd32f26cf9040279dee0bfb7af
SHA512

7513803ac2e0a6826d56591f8f4e934e6d14d4977c77e8de322a3e6cd59e5754df19f71090a087a2c1f3bb0acb69b5446aed1039dcf67a98d9ed0275c812d11b
SSDEEP

3072:TCicNam73SFebOu8e1Wzn1emmCaOjh8fDFmthrAUTpBNbWlrNYXIHaErthk:xm20bOu8ejvZCKfDO5TpBNcWEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5560ef7a0e0d890e3a463cfb55a2d1

Files

8e5560ef7a0e0d890e3a463cfb55a2d1
.exe windows:5 windows x86 arch:x86

58f7e080345ffb3a10ecbd37c6a5e267

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

RealizePalette
SetBkMode
GetBkColor

kernel32

ReadFile
GetModuleFileNameW
CloseHandle
MultiByteToWideChar
ExitProcess
GetOEMCP
SetFilePointer
GetStdHandle
LocalFree
lstrlenA
VirtualAlloc
LeaveCriticalSection
SetLastError
GetLastError
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
GetEnvironmentStrings
Sleep
VirtualFree
FreeLibrary
FlushInstructionCache
GetModuleFileNameA
CreateEventA
GetCurrentProcess
SetHandleCount
OutputDebugStringA
GetStringTypeW
DuplicateHandle
FindResourceExW
GetStringTypeA
GetStartupInfoA
IsValidLocale
GetCurrentThreadId

user32

GetWindowRect
GetSystemMetrics
SetWindowRgn
InflateRect
EndDialog
MessageBoxA
IsWindowVisible
ScreenToClient
MessageBoxW
GetAsyncKeyState
GetClassInfoExW
PeekMessageW
MsgWaitForMultipleObjects
LoadCursorW

msvcrt

_cexit
memmove
_controlfp
??0exception@@QAE@XZ
__set_app_type
??2@YAPAXI@Z

shell32

SHGetMalloc

opengl32

glPushMatrix

ntdll

NtCurrentTeb

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58f7e080345ffb3a10ecbd37c6a5e267

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

msvcrt

shell32

opengl32

ntdll

Sections

.text Size: 119KB - Virtual size: 119KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 2KB - Virtual size: 149KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 119KB - Virtual size: 119KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 2KB - Virtual size: 149KB

.rsrc
Size: 2KB - Virtual size: 1KB