8fa40b6ceaf73989b5fa0c6d80b8fdf0

Sharing

Copy URL Twitter E-mail

General

Target

8fa40b6ceaf73989b5fa0c6d80b8fdf0
Size

1016KB
MD5

8fa40b6ceaf73989b5fa0c6d80b8fdf0
SHA1

461822eeb074a91baae3dbb6cb694bd4aaa0fb0c
SHA256

a3ee52e175a2ed12dec4c856c3dfd7ffe4f6b1f801d3a4d862505eef58223455
SHA512

2c712c66beb14be805739e37ec8927ed7635403793f17b980472947f76aace329c72030665ebf793d9654dccf61848e9f0f1b14d2d5b820ef7370ede69a5055e
SSDEEP

6144:MxEp4XCJWzbRh0ScU+nBS6VEfuOCQ895jcM1:M+0zbRaSQSX3S95R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa40b6ceaf73989b5fa0c6d80b8fdf0

Files

8fa40b6ceaf73989b5fa0c6d80b8fdf0
.dll windows:4 windows x86 arch:x86

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FormatMessageA
lstrcpyA
ResetEvent
ExitThread
GetStringTypeA
WriteFile
GetFileAttributesA
SetEndOfFile
lstrlenW
SetFilePointer
SetHandleCount
FreeLibrary
lstrlenA
InitializeCriticalSection
SetErrorMode
GetTempPathA
LocalFree
GlobalFindAtomA
RaiseException
MoveFileExA
GetModuleHandleA
GetEnvironmentStrings
GetCurrentProcessId
GetDiskFreeSpaceA
FindFirstFileA
FreeResource
LocalReAlloc
IsBadHugeReadPtr
GetStartupInfoA
HeapDestroy
lstrcpynA
GetDateFormatA
GetVersion
GetCurrentThread
GlobalAddAtomA
SetThreadLocale
GetCommandLineA
EnterCriticalSection
GetLocaleInfoA
GlobalDeleteAtom
IsBadReadPtr
VirtualAlloc
SetLastError
GetProcessHeap
GetModuleHandleW
GetCommandLineW
FindClose
GetCurrentThreadId
LoadLibraryA
GetStdHandle
MulDiv
VirtualFree
CreateEventA
ExitProcess

user32

GetWindow
GetFocus
FrameRect
IsWindowUnicode
GetMenu
EnumWindows
FindWindowA
GetActiveWindow

comctl32

ImageList_Draw
ImageList_Add
ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read

advapi32

RegOpenKeyA
RegEnumKeyA
RegQueryInfoKeyA

Exports

Exports

dfDtRd7VX0i7@24
XEHXr
_24GdBbOVM@8
emmtcJ_yO1Cnk
dxQoqSA@20
dF9YG@16
_cvWeKH@24
yzOgagWHt@4
m4fr2shCZlDD@8
_Ax6oI9AS@24
_2odhZ
Httlcbo
T_MhNNDZju84C
1SF5FXHRIQBQ3W@8
_LNvinOh9l0
XYvUet
7P2JAtGzsXIAc
Ynd57s
lSILxIyYGq7D@8
2qXe2A2o@16
fsIFUjMD
_wxEN41wehP1D
J5llFNtGSSZLRS@20
nrWPP5bhoM
_2x2Fha1iIZtJ@8
jdBWDemJo
slV3x@8
VcWZqX@24
UuU5Iq@12
_rWcxOJeBK8C
_lJ1vY
_EzOxcBCq
wkVvIEDg2BD1f4
_CX2S@20
ekkTpyM
_ewjZ8ru@12
Y0dACTNOfauc
_fg4vn5qa
_wsBc1lzg@4
_t1B0rNHTCV4@24
fb0JJZfpz
5Cop6U7@16
yTWVO@20
_I69unGmirA88
z3KK8f@8
_QYUr4qz
_TDzeTF0u0
bVDXn36zbM4Fib
_A1yx1z@12
_lKoVWzfal@24
qOitv
_OJpFDczHwf
Cjmd5WIrnd8UH@8
u7I8q
4hhoPzNHz
jabkYl6fu@4
_L_LL_wWhCVi
MF0ESYI@4
_z1jwX2TnO7HbH9@24
_IRLMTIZ9@4
_m8Dc7LPOUKl@4
DVLj7O
R4zXlgH26fg
_FELGDKM5tb
MyzYboX
_h7UEcxwda0_PO0

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 790KB - Virtual size: 789KB

.kudata Size: 173KB - Virtual size: 173KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 6KB - Virtual size: 5KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 790KB - Virtual size: 789KB

.kudata
Size: 173KB - Virtual size: 173KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 6KB - Virtual size: 5KB