8f82eab0b3e255b32112472b507ece56

Sharing

Copy URL Twitter E-mail

General

Target

8f82eab0b3e255b32112472b507ece56
Size

170KB
MD5

8f82eab0b3e255b32112472b507ece56
SHA1

005cdc8ffcc45191cf7c7f63cf403a1007fd9692
SHA256

c0997ccfbb41701096497f1f56ed40a1611af111db97bb9617f707cc3ffd7033
SHA512

24722a04ca087c23daaa56d1f0ee2e558c5afa2bc873d81d301a41a493cfe41d86f3a20127b1ae1fb8db082e769c9097a71a8324b7a72c83d1143f601ea8de0b
SSDEEP

3072:LKaEvyj9h1pQyy2woldySHU98gsP5ygU:LKLqjn1eyyKhH6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f82eab0b3e255b32112472b507ece56

Files

8f82eab0b3e255b32112472b507ece56
.exe windows:4 windows x86 arch:x86

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetScrollInfo
ChildWindowFromPoint
GetActiveWindow

gdi32

CreateDIBSection
SetTextColor
GetBitmapBits
SetBkMode
CreatePalette
RestoreDC
GetDIBits
CreateCompatibleDC
SelectPalette
SetPixel

advapi32

RegCreateKeyA
GetLengthSid
RegEnumValueA
RegCreateKeyExA

kernel32

VirtualAlloc
GetCommandLineA
GetACP
GetCommandLineW
ExitThread
LocalAlloc
GetProcAddress
GetVersionExA
IsBadReadPtr
LoadLibraryExA
GetModuleHandleA
ExitProcess
GlobalAlloc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES80
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES83
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES56
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES12
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES86
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES57
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES36
Size: 1024B - Virtual size: 761B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31f5459baf0caf36d033a093fe5457b

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 138KB - Virtual size: 138KB

RES80 Size: 512B - Virtual size: 511B

RES83 Size: 1024B - Virtual size: 809B

RES56 Size: 1024B - Virtual size: 875B

RES12 Size: 2KB - Virtual size: 1KB

RES86 Size: 1KB - Virtual size: 1KB

RES57 Size: 1024B - Virtual size: 738B

RES36 Size: 1024B - Virtual size: 761B

RES03 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 138KB - Virtual size: 138KB

RES80
Size: 512B - Virtual size: 511B

RES83
Size: 1024B - Virtual size: 809B

RES56
Size: 1024B - Virtual size: 875B

RES12
Size: 2KB - Virtual size: 1KB

RES86
Size: 1KB - Virtual size: 1KB

RES57
Size: 1024B - Virtual size: 738B

RES36
Size: 1024B - Virtual size: 761B

RES03
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB