8ea93d299272990b050398dc7f3e98f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ea93d299272990b050398dc7f3e98f7
Size

41KB
MD5

8ea93d299272990b050398dc7f3e98f7
SHA1

f047c459abec15eeaa3e5ca01c2dd9614c8d0927
SHA256

88d2e41056f5d35c92e5221874c9bef6a46de6ba096d3280d938f36b9fdb1875
SHA512

94f7da7c2f0f8c0fec2455bc46d4ba9ba6422026f940efa8abecf0541e47c50682c4f7409151feffa8889857f2def07be4a0893da44e41ca564222fa5bf8d5c0
SSDEEP

768:kd9UuhfBKTrB8lXGsaQp9fEuwiI0/QKUzcv2eMN2zeTXmdB7h4mSQUreWSPzRaBN:u1B22Gs93fHwiFzelXEzvBam4kro/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ea93d299272990b050398dc7f3e98f7

Files

8ea93d299272990b050398dc7f3e98f7
.dll windows:4 windows x86 arch:x86

d650103b5d39cce0eb1a1266ceeef9b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

ExitWindowsEx

gdi32

CreateCompatibleBitmap

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CreateStreamOnHGlobal

ws2_32

listen

shlwapi

StrCmpW

psapi

GetModuleFileNameExA

imm32

ImmReleaseContext

avicap32

capCreateCaptureWindowA

winmm

waveInUnprepareHeader

msvcrt

strrchr

Exports

Exports

ServeeeDo
ServiceMain

Sections

.text
Size: 27KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE