8f775178ce76e4dca8f94a9e6968aa4a

General

Target

8f775178ce76e4dca8f94a9e6968aa4a
Size

758KB
MD5

8f775178ce76e4dca8f94a9e6968aa4a
SHA1

9efa34d76e1cf5fcb65cc399db3c79194e5aa8d3
SHA256

f83b09e2e3fb3562f2d4d70dd996749a92eb16c8af2d908d00140317fd5bdb86
SHA512

a25fce74939341ff1c5cab7532a3afcd4c4735dea41e27537806fe4e331990888cd6e7399144d922da3d2e41bcab03a3ec0e3d79fd98f2682499ce6d91c07c83
SSDEEP

192:QP/TKogXUJHxlrbV+yCvsNlbNrx2wnQoxyi+egsUCpzcD8v94VWxo43eJjbt4myY:IKogXm/RQoQegb/2Ni4K/bfy6KCMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f775178ce76e4dca8f94a9e6968aa4a

Files

8f775178ce76e4dca8f94a9e6968aa4a
.dll windows:4 windows x86 arch:x86

846d5028cf68b35df3792a5576ad9ff1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
ReadFile
GetFileSize
CreateFileA
GetCurrentProcessId
GetTickCount
IsBadReadPtr
SetFilePointer
HeapAlloc
GetProcessHeap
VirtualProtect
ExitProcess
CloseHandle
GetModuleHandleA
WideCharToMultiByte
GetCommandLineA
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
OpenEventA
CreateEventA
CreateThread
LoadLibraryA
GetProcAddress
GetPrivateProfileStringA
Sleep

user32

GetWindowTextA
SetWindowsHookExA
wsprintfA
wvsprintfA
FindWindowExA
GetWindowLongA
BroadcastSystemMessageA
IsWindowVisible
FindWindowA
GetWindowThreadProcessId
CallNextHookEx

advapi32

RegSetValueExA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA

ws2_32

closesocket

msvcrt

realloc
_strlwr
_initterm
_adjust_fdiv
_strcmpi
_except_handler3
memcpy
free
sprintf
strlen
strcpy
strstr
strcat
strrchr
isdigit
isalpha
_strupr
memset
strcmp
strncpy
strchr
malloc

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

846d5028cf68b35df3792a5576ad9ff1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 402KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 402KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 2KB