8fc1b283d26244184b7c7d1dae2b7ee1

Sharing

Copy URL Twitter E-mail

General

Target

8fc1b283d26244184b7c7d1dae2b7ee1
Size

94KB
MD5

8fc1b283d26244184b7c7d1dae2b7ee1
SHA1

f18fdf7e0c5a320ec3be147e78851742a1f724e1
SHA256

cf25418e6b612426fe0b962f197e237ad0c0ce16bac30a7e52702dccd4a8d880
SHA512

ede4646d9c43f905ce71572b6d1537fd8365d7d385f78ed0297a95bacc645890ae8954685075bbb669ca1dcacd55366bd091bdd2eeed3ae69b95dc81dae123b9
SSDEEP

1536:ZDRk50/EDi5oOmEia6li7rHIDF4W4E0oPEoPxLmi5OS9KJL3em2gSCOkz3LVUxFi:Z2UEDr7ymoo54Wh0osmlKJLe9+z3BUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fc1b283d26244184b7c7d1dae2b7ee1

Files

8fc1b283d26244184b7c7d1dae2b7ee1
.exe windows:4 windows x86 arch:x86

b3ffd07a6c5de3ea9bd05b8818659036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
GetLengthSid
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA

ole32

CoCreateGuid
OleRegGetUserType
CoCreateFreeThreadedMarshaler
StringFromIID
CreateOleAdviseHolder
StringFromIID
StgCreateDocfileOnILockBytes
CoReleaseMarshalData
CoTaskMemFree
StgOpenStorage
CoUninitialize
CoUnmarshalInterface

oleaut32

SafeArrayUnaccessData
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetElement
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
VariantChangeType
RegisterTypeLib
SysStringLen
SafeArrayUnaccessData
SafeArrayGetElement
SysAllocStringLen
OleLoadPicture

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
GetSaveFileNameA
ChooseColorA
FindTextA
GetFileTitleA
FindTextA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

user32

CreatePopupMenu
GetMenu
GetMenuItemID
EnableMenuItem
DrawIcon
DrawTextA
GetFocus
CallNextHookEx
EndDeferWindowPos
CreateIcon
GetCapture
GetMenuItemCount
GetMenuStringA
IsWindowEnabled
BeginDeferWindowPos
GetScrollInfo
EnumWindows
DefMDIChildProcA
GetKeyNameTextA
SetWindowPos
DrawFrameControl
EnumChildWindows
EndPaint
ShowScrollBar
GetCursor
ClientToScreen
GetClipboardData
GetSubMenu
DrawMenuBar
CreateWindowExA
SetTimer
GetMenuStringA
ShowWindow
DispatchMessageW
GetForegroundWindow
CallNextHookEx
GetCapture
GetActiveWindow
GetCursorPos
GetClipboardData
GetClassLongA
GetDesktopWindow
DefFrameProcA
EnumChildWindows
GetDlgItem
SetWindowPos
IsWindowEnabled
CreateIcon
DrawEdge
ClientToScreen
GetWindowTextA
CharLowerBuffA
GetWindow
DrawTextA
GetScrollInfo
GetDC
EnableMenuItem
GetDCEx
BeginPaint
CreateMenu
GetMenuItemInfoA
FindWindowA
CreatePopupMenu
DefMDIChildProcA
GetMenuItemCount
IsDialogMessageA
GetSubMenu
GetScrollPos
DrawIcon
GetKeyNameTextA
IsWindowVisible
GetScrollRange
GetKeyState
EnumThreadWindows
SystemParametersInfoA
ShowScrollBar
EnableScrollBar
DrawFrameControl
BeginDeferWindowPos
GetSysColorBrush
GetClassInfoA
GetSysColor
CharToOemA
EndDeferWindowPos
GetCursor
SetCursor
DispatchMessageA
GetFocus
CheckMenuItem
SetWindowLongA
GetPropA
GetLastActivePopup
IsChild
IsMenu
GetIconInfo
EndPaint
FrameRect
CharNextA
EnumWindows
GetParent
CallWindowProcA
GetMenu
DefWindowProcA
EqualRect
HideCaret
TrackPopupMenu
GetClientRect
RegisterClassA
DrawIconEx
SetWindowTextA
GetMessagePos
DeferWindowPos
CharLowerA
GetMenuItemID
EnableWindow
FillRect
GetMenuState
MessageBoxA
TrackPopupMenu
GetScrollPos
GetWindow
GetSysColor
GetForegroundWindow
DrawEdge
GetMenuItemCount
CreatePopupMenu
DispatchMessageW
GetCapture
GetMenuStringA
EnableScrollBar
EqualRect
FillRect
SetCursor
DrawTextA
ShowScrollBar
HideCaret
IsDialogMessageA
DrawIcon
GetDesktopWindow
FindWindowA
DefMDIChildProcA
GetDCEx
GetClipboardData
EndPaint
ClientToScreen
GetWindowTextA

shlwapi

SHGetValueA
SHEnumValueA
SHDeleteKeyA
SHEnumValueA
SHStrDupA
SHStrDupA
SHQueryValueExA
PathIsDirectoryA
SHDeleteValueA
PathGetCharTypeA
PathIsContentTypeA
SHEnumValueA
PathFileExistsA
SHSetValueA
SHDeleteKeyA

comctl32

ImageList_Remove
ImageList_Create
ImageList_DragShowNolock

msvcrt

wcsncmp
clock
log
_acmdln
memcmp
memcpy
fabs
memmove
mbstowcs
pow
ceil
strcmp
memcpy
calloc
srand
sqrt
tolower
exp
sin
strlen
malloc
clock

kernel32

GetModuleHandleA
GetDiskFreeSpaceA
GetTickCount
LocalAlloc
LoadLibraryExA
CompareStringA
CloseHandle
SetLastError
GetSystemDefaultLangID
VirtualAlloc
Sleep
ExitThread
FreeResource
GetCurrentThread
LoadLibraryA
lstrcmpiA
GetACP
InitializeCriticalSection
CreateThread
SetThreadLocale
GetStringTypeW
GlobalDeleteAtom
GlobalAlloc
FindClose
GetVersionExA
SetHandleCount
ExitProcess
CreateEventA

gdi32

CreatePalette
CreateCompatibleDC
CreatePenIndirect
SetBkColor
GetObjectA
SetBkMode
BitBlt
GetPaletteEntries
GetDCOrgEx

shell32

DragQueryFileA
SHFileOperationA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHFileOperationA
SHGetFolderPathA
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetDesktopFolder
Shell_NotifyIconA

version

GetFileVersionInfoA
GetFileVersionInfoA
VerInstallFileA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3ffd07a6c5de3ea9bd05b8818659036

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

comdlg32

user32

shlwapi

comctl32

msvcrt

kernel32

gdi32

shell32

version

Sections

.text Size: 47KB - Virtual size: 47KB

.init Size: 44KB - Virtual size: 43KB

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 47KB

.init
Size: 44KB - Virtual size: 43KB

.idata
Size: 2KB - Virtual size: 1KB